Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b876ebb-417c-362a-afd6-45d97f50278c.roa
File:                     1b876ebb-417c-362a-afd6-45d97f50278c.roa (raw, json)
Hash identifier:          NyI6SaURbypSY3cCFPrXU+E/LvNay5tIaNlblwqNEB0=
Subject key identifier:   9C:70:9F:53:68:E5:1C:72:DB:9B:06:5C:22:1E:F0:12:C7:2F:DA:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C3C54AC20A518441B6A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b876ebb-417c-362a-afd6-45d97f50278c.roa
Signing time:             Thu 12 Mar 2026 14:31:08 +0000
ROA not before:           Thu 12 Mar 2026 14:31:08 +0000
ROA not after:            Wed 10 Jun 2026 14:31:08 +0000
asID:                     396562
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:3c:54:ac:20:a5:18:44:1b:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:08 2026 GMT
            Not After : Jun 10 14:31:08 2026 GMT
        Subject: CN=73b38abf-d593-4eec-bdb1-3d8f0670ae38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:e9:db:61:2f:2c:96:78:50:b6:39:40:0b:
                    e8:e6:f0:06:58:de:8b:00:1a:b6:42:86:4c:ea:73:
                    2d:b5:5e:bd:b8:c6:22:84:48:1f:c2:c8:f3:52:01:
                    59:a8:bb:b7:26:58:6f:1c:69:4b:cb:bd:93:06:a6:
                    17:ab:9a:7b:38:6d:71:4e:81:f1:0a:5a:60:2c:e9:
                    7a:13:9d:73:e7:f3:ca:f7:e9:2c:69:fb:e1:8c:8d:
                    0a:e0:d7:07:78:e6:01:03:1a:6e:cf:95:4f:3a:02:
                    65:c9:b1:b4:cb:0e:b0:88:e3:5d:c5:f4:fa:8c:f2:
                    49:45:c8:47:7b:77:69:52:13:14:e2:ce:03:d0:ea:
                    dc:5d:33:84:80:0f:0f:7d:17:52:a6:c8:7d:b1:cc:
                    a3:0e:7e:17:1c:d3:fb:c9:b2:1e:2c:53:be:42:01:
                    71:c7:84:97:93:9a:b5:37:9f:0e:24:2f:3e:c0:4d:
                    e8:a5:c4:e6:2a:b6:36:f5:df:a4:52:b5:43:2c:07:
                    43:7a:8a:51:75:22:28:dc:93:9f:ce:41:f6:9b:f6:
                    0d:64:58:9f:06:40:86:54:a6:a4:e1:3b:f6:57:b3:
                    41:8d:0a:e8:93:ba:2a:7d:e5:78:1d:a1:27:4d:ab:
                    7d:87:3b:30:a1:e2:f2:e4:cd:4b:09:c7:53:a9:95:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:70:9F:53:68:E5:1C:72:DB:9B:06:5C:22:1E:F0:12:C7:2F:DA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b876ebb-417c-362a-afd6-45d97f50278c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:5f:73:10:98:79:70:13:8f:9d:03:1e:ea:06:ac:78:84:
         9d:03:62:81:e6:38:26:40:94:ca:13:14:0f:b5:58:69:37:53:
         b4:7c:be:a5:94:9d:ba:d1:04:24:55:f0:94:8a:4a:cc:84:bb:
         38:12:36:da:20:9e:c7:2b:1e:b0:60:c8:9f:f0:68:fa:6a:70:
         30:14:fe:b1:b0:a9:d8:88:d0:75:da:3c:f3:04:8e:09:5e:8b:
         7f:2b:78:c1:b1:6a:b4:bb:94:8f:39:46:9f:ab:f4:6b:09:e3:
         15:8c:1b:55:d8:7c:9b:fe:c0:f3:ad:40:de:df:05:26:54:b7:
         0c:23:3a:b6:e9:3b:7c:27:ed:d3:eb:5c:b8:70:eb:50:d4:0b:
         c5:aa:73:42:0a:d7:05:ba:ae:08:8b:75:5c:cd:0e:29:b4:fa:
         b5:ed:28:21:f6:59:e7:d2:65:aa:ea:3b:8c:2f:df:16:75:0d:
         0d:90:a3:fe:b9:3d:6b:c6:25:36:26:97:ff:aa:2c:ca:7b:01:
         bf:a3:47:23:f6:ed:89:fc:9a:30:0c:d6:6a:0c:3f:b0:f7:91:
         66:60:12:6b:69:46:8f:27:68:92:fe:e6:eb:a8:81:ca:99:ed:
         34:d1:4c:8f:21:a3:55:57:5b:57:82:80:fe:4a:c8:db:00:51:
         f4:57:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:40 2026 by rpki-client