Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0c3693-f48e-32e1-84ca-bdccddaf17fd.roa
File:                     fa0c3693-f48e-32e1-84ca-bdccddaf17fd.roa (raw, json)
Hash identifier:          1OpvNBsvQOolSsgmuvQyERDd+rLwoDv1xLUGCOMXKsk=
Subject key identifier:   0B:AE:53:33:36:9E:46:FD:A6:CE:B6:4C:4A:6D:C4:CE:9F:F8:9A:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B855542165C19BBF20CF440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0c3693-f48e-32e1-84ca-bdccddaf17fd.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     396591
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:55:42:16:5c:19:bb:f2:0c:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=166e5fa4-90a2-432d-9707-b7901ecc6da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:e6:17:7c:11:2e:fe:d0:c8:d2:0e:3c:45:
                    38:51:90:93:ea:94:56:d9:47:cd:cb:1f:61:2b:af:
                    80:df:1e:3d:5c:eb:a4:76:9e:03:b5:d3:81:cd:f3:
                    25:58:2f:a6:8c:2b:52:1d:e5:8c:3a:45:e9:c4:b1:
                    d7:a1:af:ef:89:ea:b0:96:b3:4b:8a:3b:22:09:c0:
                    41:a6:78:6a:d3:75:d1:1d:91:3b:94:5d:35:28:c8:
                    2f:c3:0f:60:cc:1e:5a:97:7a:f4:c0:14:55:9c:6e:
                    d8:9b:b9:40:d6:bc:07:07:c1:28:07:18:66:24:43:
                    83:02:b8:e6:1f:d2:cc:23:0c:2f:da:87:71:c8:b2:
                    8d:20:f3:92:01:cb:7a:b2:d8:2d:4f:d8:e0:71:da:
                    7e:7d:c5:88:48:c5:04:bb:61:f0:0a:02:47:32:18:
                    85:8e:56:43:01:0e:a3:c1:41:d4:c0:24:12:f8:b5:
                    90:28:82:d5:be:6b:da:64:50:ed:55:6e:78:be:5f:
                    13:45:5b:f2:e0:84:e1:a6:b0:c6:cc:2d:5a:7b:91:
                    c7:f4:f6:04:ed:81:16:2a:16:75:d2:f3:bf:3a:55:
                    70:6a:3c:20:39:4f:31:eb:49:22:0c:1b:18:9d:22:
                    8e:77:94:48:2f:42:e0:fb:93:84:00:ab:bb:06:91:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:53:33:36:9E:46:FD:A6:CE:B6:4C:4A:6D:C4:CE:9F:F8:9A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0c3693-f48e-32e1-84ca-bdccddaf17fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:e5:79:eb:fb:23:19:b0:26:c7:f2:f3:b2:8a:75:07:c7:
         0d:76:19:5b:e8:0a:8c:be:ab:03:86:9e:09:d5:26:a7:6d:55:
         6e:8a:4c:5d:22:75:29:dd:74:f2:ea:d1:2f:16:4a:eb:46:c2:
         c9:6f:b1:18:1a:33:71:ca:3d:11:4b:67:4a:9f:64:fd:60:83:
         b3:88:e0:8a:68:ea:81:9d:0c:5a:21:4b:03:f1:81:fa:31:29:
         8e:32:45:2a:a0:f4:5c:84:a4:a0:db:73:90:9e:78:54:13:d6:
         08:65:7c:80:b8:50:51:d5:00:4f:00:e5:b5:95:af:dd:30:fd:
         b2:84:59:cf:c3:85:c4:90:fa:5c:d3:34:33:39:68:b4:7d:85:
         57:18:fa:ce:f4:21:37:bc:7d:00:68:d0:b5:e7:2f:ca:d3:87:
         8d:71:4b:60:b5:30:99:32:98:10:21:0c:4b:b4:46:2b:d1:3e:
         07:d1:2f:79:d3:12:d1:d9:36:ce:51:33:e4:37:50:7a:c5:7e:
         7f:0c:2b:73:03:d4:26:19:ca:04:95:4f:66:33:40:fe:28:6f:
         e5:dc:46:d3:6a:e7:b1:d9:5a:af:76:a6:0e:90:6e:02:88:32:
         bc:97:72:c3:04:2e:d0:22:92:03:62:14:39:5d:73:08:c8:e8:
         a5:8b:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:14 2026 by rpki-client