Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1abe09f1-eabb-3e13-aa7a-14f29e709d7d.roa
File:                     1abe09f1-eabb-3e13-aa7a-14f29e709d7d.roa (raw, json)
Hash identifier:          fVrMtdpzUhD7aw03qWw1B/f/ijW1nk4WynodtdY200A=
Subject key identifier:   D0:96:C9:86:0F:45:94:81:7C:39:D7:6C:06:C0:EB:B0:E2:1F:F6:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D32F5A48123464329308B1180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1abe09f1-eabb-3e13-aa7a-14f29e709d7d.roa
Signing time:             Tue 17 Mar 2026 14:06:56 +0000
ROA not before:           Tue 17 Mar 2026 14:06:56 +0000
ROA not after:            Mon 15 Jun 2026 14:06:56 +0000
asID:                     396543
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:a4:81:23:46:43:29:30:8b:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 17 14:06:56 2026 GMT
            Not After : Jun 15 14:06:56 2026 GMT
        Subject: CN=f658e745-dfc5-4704-b90a-38a43e69e542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:77:ad:8f:b5:2c:86:c6:d0:2b:61:a8:39:56:
                    75:96:18:99:b7:ab:79:51:2f:ce:eb:82:62:c8:4f:
                    45:20:44:58:83:a3:a8:25:65:4f:2c:dc:de:75:f5:
                    e6:ff:ca:c8:8a:33:56:ee:5a:34:21:e9:b4:df:56:
                    8d:4e:94:20:95:8f:6e:91:7c:90:a3:d2:3f:0b:cb:
                    00:ea:10:ad:86:f9:58:ce:21:80:19:59:0d:6e:18:
                    3b:73:bd:e4:d6:0e:a9:b8:7a:5e:89:c5:22:4f:cc:
                    9f:5f:b8:cb:c8:5e:14:c4:9b:af:50:e9:71:ec:5f:
                    9d:bb:e6:14:a4:de:33:41:ac:a3:4e:6d:51:1e:db:
                    e6:c9:d3:5d:84:ef:87:00:38:2c:84:24:e7:11:87:
                    62:3d:95:99:aa:5b:c7:8e:2d:a1:95:52:ae:16:8c:
                    29:94:e4:61:6a:e7:e3:9f:d2:c0:95:7f:1b:c9:1d:
                    c6:03:36:75:28:d8:45:fc:f0:5e:39:bd:cc:ec:06:
                    27:90:da:d9:fe:c2:57:84:37:2b:9a:8a:66:5c:ac:
                    2b:b3:b4:0b:e0:12:68:01:78:e1:55:2f:36:b0:9b:
                    a7:73:69:93:5d:f9:08:e2:33:85:76:71:3f:15:e5:
                    23:3e:47:14:b7:59:8b:8a:61:da:52:23:3d:ce:e0:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:C9:86:0F:45:94:81:7C:39:D7:6C:06:C0:EB:B0:E2:1F:F6:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1abe09f1-eabb-3e13-aa7a-14f29e709d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:56:84:58:10:61:4f:3b:7a:31:1e:95:00:69:79:50:34:
         d5:e9:b4:c3:9d:be:5f:cd:d6:38:bd:65:57:65:3c:9c:c7:ce:
         32:fe:c6:ea:3a:36:f4:e0:f0:b0:33:1b:73:cd:98:ce:19:ca:
         f9:53:c9:d6:a3:a5:58:a3:f0:64:0c:ec:ec:4f:1a:fb:ba:90:
         87:8c:17:1a:9f:52:94:97:9f:e3:9e:30:96:7c:a0:0b:6e:24:
         c9:ed:dd:99:20:7f:3e:06:c8:f8:95:5d:61:e5:1e:fb:0a:fd:
         40:a9:8e:98:de:12:7a:a5:ed:b6:06:f1:ba:f7:f5:45:54:87:
         04:ba:78:46:2f:cf:68:c7:7a:93:59:79:07:34:40:7f:60:04:
         ba:aa:c6:19:5a:99:e3:51:e0:d4:7a:db:79:fd:9f:2a:08:3c:
         98:e0:f8:2a:65:4c:11:8c:9a:dd:61:d5:27:9d:52:66:9f:bd:
         5f:6a:8d:ca:40:f3:62:ec:5f:d8:af:89:e8:28:28:a1:5d:92:
         d8:8f:48:4b:ac:1f:5c:e8:75:24:4f:02:10:a2:ec:4a:69:fe:
         10:6c:59:77:98:51:2b:6b:c9:0a:55:5b:32:17:53:e6:ff:7f:
         83:84:1c:21:bd:8c:32:03:bd:56:d2:2a:44:4c:33:02:6d:22:
         be:05:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:36:49 2026 by rpki-client