Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02bb886f-f584-31d8-8184-bf334024d9c6.roa
File:                     02bb886f-f584-31d8-8184-bf334024d9c6.roa (raw, json)
Hash identifier:          BgqUW2fwIDbwtzzqZ6+JDawdT0Y/ACqajKUja6HtZJ8=
Subject key identifier:   6E:D2:4D:9B:99:9F:22:1E:70:28:17:22:9D:8A:DF:97:7E:42:FB:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C036BB5858B3634281DBE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02bb886f-f584-31d8-8184-bf334024d9c6.roa
Signing time:             Tue 03 Mar 2026 15:18:10 +0000
ROA not before:           Tue 03 Mar 2026 15:18:10 +0000
ROA not after:            Mon 01 Jun 2026 14:18:10 +0000
asID:                     36629
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:6b:b5:85:8b:36:34:28:1d:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:10 2026 GMT
            Not After : Jun  1 14:18:10 2026 GMT
        Subject: CN=1ca6cea8-4ba3-4d7d-b981-b08911548f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:0b:cb:e7:ef:71:3d:c0:6b:74:e6:3f:87:
                    e9:62:c6:38:20:e1:9d:16:a1:84:9c:c8:0a:8e:04:
                    6b:f8:13:16:2a:d8:2e:20:87:95:46:4c:a5:10:65:
                    f0:9a:1f:79:84:7e:36:b3:d7:a0:c7:a7:5e:f9:e1:
                    41:8d:fb:90:b2:8c:9f:b3:a9:37:88:0f:af:28:b2:
                    99:ce:7a:84:e8:7a:5e:5a:d6:1a:aa:ed:3d:7a:8d:
                    d2:6f:0f:a7:8b:ca:72:9d:3c:52:46:eb:88:7f:3d:
                    d2:a7:da:f2:10:a2:44:49:93:fa:d1:c3:e0:85:1d:
                    5e:38:61:03:b8:7b:fb:81:14:8b:a8:a3:9e:2b:1e:
                    cc:38:77:ea:ba:82:e9:d3:d4:e8:6f:ba:93:27:f2:
                    66:1c:6c:ad:95:ee:95:50:31:c3:92:41:9e:c7:55:
                    46:f5:f3:ee:06:31:aa:af:71:b5:cc:71:3d:6d:9b:
                    c8:da:a4:d0:b9:57:95:98:ee:7e:2f:ff:9e:ac:5d:
                    f4:57:6c:10:36:e8:0c:50:42:15:7d:2e:71:91:4c:
                    98:0d:59:36:92:bd:1c:cd:b5:d8:96:aa:88:a5:1e:
                    30:df:a7:a8:39:3e:5f:96:29:49:34:6b:72:03:c0:
                    f3:04:1b:15:67:62:91:d6:cc:b7:6d:d6:32:db:15:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D2:4D:9B:99:9F:22:1E:70:28:17:22:9D:8A:DF:97:7E:42:FB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02bb886f-f584-31d8-8184-bf334024d9c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:02:4c:07:26:8f:64:23:60:6d:f1:ed:18:8c:1f:12:dd:
         06:73:4e:69:0a:4c:03:fc:52:07:97:6e:96:73:5f:8a:5e:b1:
         0f:6d:04:fa:d0:72:2f:e0:77:9d:be:ec:01:dd:c7:8a:56:70:
         b7:97:29:dc:ca:15:f0:23:67:8e:a5:72:15:f5:10:c2:7e:2d:
         92:3e:20:d6:f6:a1:de:4d:ed:31:93:51:c1:96:28:b3:9d:6b:
         99:71:67:9d:da:91:48:0c:a5:35:b7:3b:87:93:c9:d9:b2:ff:
         f2:16:aa:fb:d9:f6:2e:2f:1c:4e:45:37:a0:c9:d9:74:96:bf:
         c3:49:f9:00:74:32:1a:87:da:d5:d8:51:a9:5b:17:f3:69:1d:
         39:7b:5d:d7:aa:6b:7e:99:99:07:f5:24:26:94:06:d9:38:69:
         15:9a:d8:08:0a:dd:92:1c:a0:a7:65:b0:a8:6d:53:ce:f3:1a:
         34:5c:fe:16:0a:cc:03:b1:9f:2f:c0:0d:9f:7c:16:c6:6b:2f:
         3d:85:51:ff:36:ac:0d:a2:f5:36:8e:5c:e8:43:eb:fb:58:fe:
         54:3f:bf:8c:6a:61:8d:62:88:f3:11:83:fe:68:98:f4:1c:af:
         db:04:7d:d2:f2:ed:94:7c:1f:b4:26:0e:56:4b:54:34:3d:17:
         5c:c4:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:35 2026 by rpki-client