Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9f55978-5d30-34ee-8420-772edc3e73b4.roa
File:                     f9f55978-5d30-34ee-8420-772edc3e73b4.roa (raw, json)
Hash identifier:          p/OtoKPq56B7XXumVS7OiVJAQYoE4D9hORng1FKRGA4=
Subject key identifier:   A9:09:6D:E7:2C:97:D5:3C:0A:BF:E2:27:A4:B6:A0:A2:49:81:E8:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3B15FD8CC34BAB13E20100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9f55978-5d30-34ee-8420-772edc3e73b4.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     396541
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:15:fd:8c:c3:4b:ab:13:e2:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=41af4933-4c59-4a8c-b341-f3732e867129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:a5:8d:5b:aa:7b:cf:a4:9e:2b:d8:cd:2a:
                    14:e2:39:dc:4c:09:c7:7c:16:05:07:33:d6:4e:9f:
                    0f:f3:3a:74:56:0b:72:80:34:2c:e8:27:cc:f2:ca:
                    9d:b0:45:c2:2f:d3:32:57:87:77:ca:60:e6:9f:8d:
                    3a:16:e7:8c:57:ee:fa:58:35:29:04:13:2e:9e:a5:
                    96:95:62:68:26:ee:9b:3c:9f:7c:5d:57:4d:e8:44:
                    9d:46:c7:9d:94:2c:7a:31:15:d0:5d:01:e7:be:ae:
                    99:b3:ce:cf:6b:ea:4a:a8:ff:a6:1b:a5:24:a6:c2:
                    ec:5b:a3:55:5c:cc:ff:56:ff:50:cd:bd:0d:df:cd:
                    cc:f7:b9:ba:aa:e2:27:67:bc:a9:b8:09:67:9d:05:
                    d3:2a:cd:41:88:0d:9e:5f:51:61:f5:64:e8:29:2d:
                    04:3f:86:07:a5:68:90:94:0e:f9:ad:09:80:68:0e:
                    b5:01:72:d6:2b:5a:83:69:39:7b:e8:ef:63:98:2c:
                    d8:03:ee:a8:0d:03:6d:75:10:ab:47:67:35:49:7d:
                    41:d4:ab:ba:f5:67:37:ff:65:21:24:cb:5e:82:3f:
                    03:0b:e8:f0:98:00:48:0b:00:df:4b:86:d8:14:c7:
                    fe:b4:45:9b:c1:f5:ea:8a:16:57:59:dc:f0:22:09:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:09:6D:E7:2C:97:D5:3C:0A:BF:E2:27:A4:B6:A0:A2:49:81:E8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9f55978-5d30-34ee-8420-772edc3e73b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:99:bd:2a:1f:0b:f1:d1:2a:a3:3b:22:0f:5d:2e:a6:5b:9c:
         4c:65:81:c4:3c:ed:73:ae:ba:31:b2:ab:9c:ae:05:60:60:5c:
         8d:8b:0a:be:c7:4d:d9:d5:4e:08:f6:11:7d:b0:a4:74:7d:45:
         f0:33:98:be:4a:92:bd:b6:e3:47:01:79:3f:3d:29:a5:21:d8:
         6f:c0:7d:20:c5:43:58:56:1e:a0:6e:dd:56:78:ce:ad:b2:81:
         70:7a:b5:de:d0:ce:6a:57:c0:c7:9b:f2:6f:9a:78:81:c9:90:
         0a:82:1b:8a:a3:64:02:02:65:2e:db:00:9b:5f:5c:fb:bd:85:
         12:60:13:5e:0a:70:51:33:34:31:2c:ab:97:0c:24:35:21:7c:
         78:db:96:b2:c3:ef:53:b7:9b:2d:4a:7d:a5:e1:b7:24:86:f6:
         40:71:83:5a:4c:c1:77:4f:bc:99:fc:b4:e1:de:b2:3a:f4:99:
         8e:06:ab:2d:da:86:6e:63:83:04:97:e4:b8:bb:b4:68:84:2b:
         d7:2f:36:c2:8b:56:b4:eb:3c:88:f0:77:e7:a1:53:dc:28:b8:
         3f:21:2e:64:43:7e:0b:d4:f4:3c:8b:d5:38:be:c0:a3:08:72:
         cd:ef:08:8f:a2:f8:b9:60:20:6e:a9:9b:4c:31:29:41:06:fc:
         3b:b4:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:56 2026 by rpki-client