Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
File:                     f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa (raw, json)
Hash identifier:          yG5NxXPwoe+eCnUtohe79IvSLYFcFpZ2xKFrYY86j8U=
Subject key identifier:   26:E1:4F:2A:46:E5:97:C0:5E:F6:ED:5A:88:15:EB:58:F7:2A:6E:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A202DC112057B3924D62080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     396578
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2d:c1:12:05:7b:39:24:d6:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=2d095e38-5a57-4e4e-bd6f-89240f934131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:67:0d:f7:de:b5:c6:91:77:f8:b2:b3:0e:
                    ac:b7:a7:21:a8:41:95:1c:c0:54:f9:1d:d5:e9:b1:
                    78:f9:0a:01:91:23:e5:84:75:63:2f:44:69:05:90:
                    ba:39:91:d2:02:50:95:37:13:dd:99:56:48:5b:5f:
                    2a:57:48:93:ee:16:c6:07:71:48:6a:35:90:a2:8c:
                    99:72:f0:77:fa:92:b2:dd:c3:46:9f:9e:a8:1d:62:
                    aa:61:97:82:e5:7e:84:c9:27:5f:21:ad:29:5c:4c:
                    06:ef:b4:3c:0d:60:95:75:13:71:62:c3:ba:f1:39:
                    40:a1:28:5b:62:34:83:db:04:18:b0:1d:4d:3f:d4:
                    66:7d:02:0a:18:d2:cc:aa:cb:c1:86:3d:35:b2:71:
                    73:27:51:a0:3f:f5:51:c6:ab:a8:03:1d:d6:2e:6d:
                    49:69:45:61:d3:68:50:91:c3:c9:2f:26:fa:f0:7e:
                    d2:a9:60:29:5c:8a:66:69:e9:08:40:44:5e:b5:dc:
                    ac:b4:80:a7:d2:3f:7a:28:c9:6f:47:cd:91:47:b7:
                    38:55:06:30:9d:34:de:c6:0e:2e:c7:58:66:da:14:
                    a7:a1:17:52:2a:eb:16:e7:4f:19:6a:19:96:ad:0b:
                    5e:98:f4:ca:af:29:31:02:01:74:0c:22:c1:5f:e4:
                    03:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E1:4F:2A:46:E5:97:C0:5E:F6:ED:5A:88:15:EB:58:F7:2A:6E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:27:be:90:71:70:8f:39:d0:ea:01:9f:6e:95:18:d7:3f:6e:
         72:63:5c:5d:78:ea:b7:87:a8:91:d1:48:1e:d9:e7:a3:5d:1e:
         c0:b4:ae:6c:58:d1:a8:8f:c9:8c:e9:48:2c:56:ab:ab:80:13:
         8a:8a:96:f1:b0:39:6c:48:df:93:d2:6b:24:c1:ef:9f:5c:c1:
         82:7b:f0:0d:32:ea:1d:c9:af:29:b4:20:ad:38:e9:84:a4:e7:
         1a:34:a4:b5:b9:8d:a0:8a:3f:94:61:a5:38:17:cc:4f:c9:c7:
         93:60:1f:a4:c3:92:ab:ac:35:bc:d9:4f:b4:2c:be:46:67:31:
         fb:13:7a:8c:5a:6b:ce:a9:85:e3:92:66:b5:20:84:54:67:c8:
         4b:49:52:54:df:d1:32:66:93:e3:1e:90:72:fa:8c:81:cc:c5:
         66:5f:c9:ee:bc:cd:05:4b:d4:9b:c0:96:12:21:15:bf:c2:df:
         bd:37:cc:b7:ce:78:7f:25:43:a6:8c:d9:90:7e:0a:f3:0f:8b:
         ff:45:96:16:b8:b1:10:c6:eb:04:5a:5d:7a:96:d3:38:2f:94:
         71:8f:80:cd:f1:97:2f:42:0d:b6:1f:c6:89:f1:8a:3b:8f:5b:
         b5:bf:79:a8:7d:ea:2b:9b:04:fd:c7:e0:c9:7e:ba:5b:36:27:
         eb:71:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:49:29 2026 by rpki-client