Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/051045d5-784c-32b2-afab-5c4757acdae3.roa
File:                     051045d5-784c-32b2-afab-5c4757acdae3.roa (raw, json)
Hash identifier:          5zcbdqj7WOcZd5Nbua/VKSZFExwtBwHJ8No0SaMFzlQ=
Subject key identifier:   56:7E:5D:A6:CC:F7:5A:D0:0F:5D:26:DB:AB:C3:72:4B:BE:C8:BD:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D32F5A698B735B2791DD54480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/051045d5-784c-32b2-afab-5c4757acdae3.roa
Signing time:             Tue 17 Mar 2026 14:06:57 +0000
ROA not before:           Tue 17 Mar 2026 14:06:57 +0000
ROA not after:            Mon 15 Jun 2026 14:06:57 +0000
asID:                     396583
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:a6:98:b7:35:b2:79:1d:d5:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 17 14:06:57 2026 GMT
            Not After : Jun 15 14:06:57 2026 GMT
        Subject: CN=dd3d7e25-919d-4b76-a8ea-4a997d4e337a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:96:2c:c7:95:f0:fc:45:2f:fd:03:f8:53:
                    8c:92:72:80:8a:a3:f9:d5:50:32:6e:dc:5c:87:c4:
                    03:75:44:5a:1d:8a:52:d9:d5:5f:d8:42:2d:01:7b:
                    04:c5:19:52:9e:6f:b0:fb:a0:d2:82:6a:7e:e2:5a:
                    9c:86:7f:c3:e3:12:00:40:c5:0e:40:ca:04:6b:86:
                    88:53:56:09:6c:f9:95:23:90:f8:4c:01:e6:44:f6:
                    8f:2e:81:73:47:fd:d8:41:41:8e:92:fe:0d:e3:19:
                    68:21:b2:44:c1:ba:88:d3:6f:1e:60:b1:ce:85:a3:
                    0d:d8:76:7e:dc:d7:fd:24:17:e4:b7:c8:9d:07:a9:
                    9c:85:23:26:e3:cc:28:5b:73:d0:da:08:54:a3:e6:
                    82:5e:49:a5:bb:ea:c6:f2:a8:12:1d:b4:ed:4c:7c:
                    f3:ef:3e:3f:f1:95:d3:ba:39:89:2e:36:b2:88:7b:
                    d3:d0:85:90:08:11:47:5e:94:68:5c:dc:e9:b4:46:
                    1c:76:2f:64:4a:5a:53:a4:70:73:f9:94:65:b8:3e:
                    db:29:28:e9:ce:eb:4d:26:cf:00:cb:8a:d3:95:4f:
                    17:e3:ba:c8:74:92:9b:22:64:41:37:49:3b:aa:80:
                    b9:0c:d1:75:d7:e4:0c:08:e9:28:0e:c0:2a:4e:63:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7E:5D:A6:CC:F7:5A:D0:0F:5D:26:DB:AB:C3:72:4B:BE:C8:BD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/051045d5-784c-32b2-afab-5c4757acdae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:14:72:12:4e:59:3d:f3:d2:40:13:c3:4e:dd:86:e8:55:53:
         9e:3e:0e:a2:6e:93:3b:26:a9:95:29:88:f9:71:4d:55:19:3d:
         24:3b:90:41:23:5e:e0:56:ab:b8:a2:ff:aa:ce:2a:0f:a7:d3:
         44:ba:88:ae:2d:90:98:e2:d6:af:25:6d:95:d9:76:7b:ff:82:
         08:2e:35:59:f8:1a:e3:37:39:12:27:0f:a0:be:ba:4e:cc:72:
         74:a8:55:4d:34:ac:33:b7:df:84:a9:93:39:09:18:23:7a:b0:
         61:e3:7d:c2:11:f3:00:9f:90:08:85:45:95:ed:d8:dc:bf:50:
         ed:de:cd:16:f0:c9:f0:cc:d1:a5:4c:1c:03:73:4e:87:0f:47:
         ac:eb:e6:75:70:84:92:02:31:7c:3e:db:db:f4:47:00:ed:5e:
         c5:1c:aa:b4:6d:8a:15:9f:67:f7:73:b1:4f:2c:14:c8:b7:82:
         2d:bd:d5:7b:a4:ef:0c:af:e7:07:d6:c2:0e:30:6c:1c:f4:02:
         f5:d0:23:7c:02:a9:1d:59:50:50:17:20:18:f6:d7:bf:78:50:
         61:e3:1c:30:db:69:be:ce:41:f9:5c:ec:3e:25:e5:ea:06:2d:
         81:1e:97:7a:12:2c:5c:aa:e3:8f:23:54:bd:39:fa:26:5e:8a:
         31:14:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:15 2026 by rpki-client