Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa
File:                     1f1d842a-8b80-3174-b179-a1287f433e90.roa (raw, json)
Hash identifier:          +NADOf/iQyC2bNZPJLuEeGiyfXXpUbX2n9P7DWLSV90=
Subject key identifier:   A3:9B:53:F6:28:49:D7:10:EC:B5:FA:61:63:42:F6:A3:41:94:F7:89
Certificate issuer:       /CN=c5aae53f-608a-4f49-919c-d5976c7324b1
Certificate serial:       010D0C9F4328584D92A4AC82BE5039F911A1E280
Authority key identifier: 19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa
Signing time:             Mon 20 Apr 2026 20:41:23 +0000
ROA not before:           Mon 20 Apr 2026 20:41:23 +0000
ROA not after:            Thu 25 Jun 2026 17:00:39 +0000
asID:                     54201
IP address blocks:        2605:bc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:a4:ac:82:be:50:39:f9:11:a1:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5aae53f-608a-4f49-919c-d5976c7324b1
        Validity
            Not Before: Apr 20 20:41:23 2026 GMT
            Not After : Jun 25 17:00:39 2026 GMT
        Subject: CN=50d0c3f9-9dc3-458f-bf29-ef2bff86f662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:e8:da:bd:27:3d:f3:25:ea:b1:b8:06:9e:
                    ab:9e:84:4f:44:4f:76:68:94:50:e3:ac:03:63:57:
                    3c:bd:2c:22:1a:5b:33:dc:32:14:a5:e0:44:a9:56:
                    0d:8a:09:53:40:b3:37:26:53:8e:35:6e:74:72:77:
                    d8:e3:45:b0:c5:14:84:87:aa:c6:ee:35:ae:ff:d8:
                    85:1c:44:15:f8:39:88:d5:df:14:dc:57:f4:6f:18:
                    62:bd:90:7e:a3:bc:61:c3:b2:28:2e:b8:31:6b:f2:
                    d3:bb:7d:c9:8d:2f:dd:bc:fb:76:31:ec:84:4a:66:
                    19:81:20:60:23:a0:61:6f:33:47:6d:90:10:04:aa:
                    50:92:4d:84:6b:81:d9:e9:14:6f:05:c1:fb:65:53:
                    a8:4b:cc:0a:49:3a:a3:82:fd:f5:5e:a3:44:0e:5b:
                    94:fb:46:8b:8c:21:73:75:89:a5:8e:af:ba:23:a2:
                    41:c8:fe:5f:6f:f0:4f:cc:1b:0a:90:59:d7:76:3d:
                    01:64:97:c0:b5:32:18:66:b0:95:d1:02:41:e3:7f:
                    59:66:72:e2:ab:cb:c5:4d:a0:5b:82:b4:0b:18:f2:
                    6e:16:8f:98:37:7d:94:2f:23:e1:d7:0c:54:ff:b5:
                    85:85:98:9e:9a:a2:b2:61:10:66:29:cf:e1:8a:70:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9B:53:F6:28:49:D7:10:EC:B5:FA:61:63:42:F6:A3:41:94:F7:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl

            X509v3 Authority Key Identifier:
                keyid:19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:d0:66:f7:52:2b:3a:d4:ad:a8:fd:ef:38:3c:08:8d:1c:
         5a:54:51:aa:0c:c9:79:fc:cf:ef:45:a1:5d:82:1d:58:34:ce:
         11:fb:58:2d:89:fc:3c:28:e1:57:0f:93:b9:16:3b:77:6b:f4:
         1b:bc:70:5e:09:7e:cb:62:fc:28:ad:ec:55:31:61:1c:c4:80:
         62:66:31:19:87:07:79:28:84:57:2b:62:d7:fd:86:10:43:e0:
         05:56:aa:32:9e:37:be:69:46:c1:ad:3b:5d:5f:4f:1c:a6:3c:
         1e:1d:59:eb:a2:14:a1:a1:7b:9e:4c:44:8a:53:8b:30:e2:0c:
         5e:a1:07:fc:52:be:50:38:d6:f3:48:f2:2a:e1:28:66:db:14:
         b5:e5:24:3c:b2:e8:ea:65:a6:bd:09:5d:4c:4c:ac:38:0f:ee:
         73:24:73:d2:7e:f2:ea:e7:bf:ef:31:ff:8a:72:ae:47:df:ed:
         62:26:62:3d:e3:59:c2:e3:9b:08:0d:01:4b:34:eb:c4:bf:17:
         e4:e2:75:48:5d:94:e2:6f:14:a1:4c:12:e8:19:b6:15:93:f0:
         19:8b:ed:86:f6:b0:ad:ed:ff:26:16:44:fc:8b:bb:15:75:c6:
         8a:73:9b:22:10:8b:85:7a:20:27:f5:83:ce:73:6d:1f:66:fd:
         a2:a1:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:24 2026 by rpki-client