Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f186a859-185c-30f4-9fb4-3bd6e8b109c3.roa
File:                     f186a859-185c-30f4-9fb4-3bd6e8b109c3.roa (raw, json)
Hash identifier:          7UGrB89P3gSJ+lGupLFRGZXoSwzcCxV4P7ump6TF+NA=
Subject key identifier:   E4:81:43:82:B5:F0:96:9F:F9:B2:31:C8:E4:70:F2:2F:32:86:99:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBBA070355AB1494D9B5E3F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f186a859-185c-30f4-9fb4-3bd6e8b109c3.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     397194
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:70:35:5a:b1:49:4d:9b:5e:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=87fa68c8-afce-46c8-aa38-2a58aa29b771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:c7:bc:b5:08:db:cf:0a:6f:33:c4:86:a5:
                    2c:98:9c:de:39:92:82:75:f7:cb:af:f9:48:2e:14:
                    ad:83:aa:51:d3:4a:c2:94:2a:ae:d7:b2:47:e0:71:
                    20:02:a8:08:d0:51:9f:67:b6:6f:45:53:1e:aa:e9:
                    3a:8e:9b:fd:59:93:f8:da:07:4f:b9:13:d6:ba:98:
                    93:89:22:5c:1f:8c:65:c5:bc:0e:77:d9:54:34:e6:
                    17:cc:dd:dd:48:89:89:61:b8:dc:c1:b5:91:2c:49:
                    40:83:a5:59:47:21:ab:22:7a:52:6a:6d:24:04:b0:
                    c1:5b:5a:69:3d:26:a8:b2:a0:c2:16:c3:0b:c6:ae:
                    10:37:0c:70:54:52:fd:31:10:48:d1:8b:00:d3:51:
                    0d:7e:56:66:4f:9a:b2:d0:be:84:e0:2a:3e:c6:2d:
                    60:7c:fb:e0:15:7d:91:0f:b6:f2:33:b8:c9:ff:a0:
                    49:99:75:31:df:b6:1c:1b:50:fb:39:4b:25:6b:2e:
                    ee:b2:c4:d9:ba:15:d4:cb:ab:e4:12:36:77:84:4b:
                    74:2e:1e:93:14:be:c1:fa:23:33:5d:ab:e3:cf:c2:
                    2a:5d:c4:a1:7e:5f:2e:80:99:fa:db:3e:23:30:6e:
                    eb:c4:20:07:91:21:65:f9:63:2b:d1:8c:e3:22:a0:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:81:43:82:B5:F0:96:9F:F9:B2:31:C8:E4:70:F2:2F:32:86:99:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f186a859-185c-30f4-9fb4-3bd6e8b109c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:06:9e:77:63:2f:a1:57:96:0f:be:b5:b7:f5:a9:70:ab:
         a0:cb:af:47:60:0b:01:e9:0b:3d:71:27:dc:7c:b7:19:73:90:
         e4:b3:d3:5c:c5:c6:fa:5c:f3:ba:c6:43:d3:9a:e8:3a:50:a0:
         a4:c4:24:6f:68:42:47:1c:ee:a1:74:bc:94:82:99:1f:b4:96:
         f7:27:98:88:a3:f0:bb:5e:bb:c6:1a:d0:91:7d:77:15:e6:7c:
         0e:1e:f4:7e:cc:cd:ba:11:6b:ed:10:ae:0a:7f:6c:b1:9a:2d:
         65:5e:58:b7:41:c8:24:69:00:44:77:4c:63:68:aa:75:f5:83:
         3a:bf:38:94:05:19:74:e6:cd:7c:c5:85:2c:c1:3b:39:77:80:
         70:5e:02:6b:6b:50:8b:ff:dc:0e:8e:08:31:43:78:50:e4:4d:
         aa:8e:83:5c:e3:c8:ce:47:14:ec:38:65:ab:a9:ce:cb:c5:d8:
         a7:bf:a4:52:6f:b8:a0:fb:a1:9c:d4:4d:17:a4:b6:1d:df:6f:
         ab:77:83:49:99:cc:bf:1b:95:4d:66:b2:c3:6d:79:55:33:99:
         4c:40:ba:5d:45:7a:ad:3c:2c:d3:e1:ef:d6:1b:23:5e:9f:eb:
         f5:b5:54:e7:8a:c9:4d:d1:2a:37:fc:5c:ab:70:ca:91:0e:96:
         23:5b:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:33:27 2026 by rpki-client