Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e088b47-01c3-30ac-9a0c-08ae96be2bf4.roa
File:                     1e088b47-01c3-30ac-9a0c-08ae96be2bf4.roa (raw, json)
Hash identifier:          MEY00B9Tj5wh0RYNgt5pbaahQju74Xu/r/TP7eHMF8U=
Subject key identifier:   B2:EC:99:8A:DB:63:9F:8D:96:87:F0:DA:E3:E1:05:7F:46:6E:88:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C3685AB096A1583740280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e088b47-01c3-30ac-9a0c-08ae96be2bf4.roa
Signing time:             Thu 12 Mar 2026 14:31:05 +0000
ROA not before:           Thu 12 Mar 2026 14:31:05 +0000
ROA not after:            Wed 10 Jun 2026 14:31:05 +0000
asID:                     21313
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:36:85:ab:09:6a:15:83:74:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:05 2026 GMT
            Not After : Jun 10 14:31:05 2026 GMT
        Subject: CN=78b4b4b6-4156-4cb4-95ab-c99cd91009d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:9b:09:c1:5f:6e:0c:6d:d6:b1:e0:f3:82:
                    76:dd:3a:a0:44:35:64:cc:12:bd:da:41:83:5c:48:
                    06:50:b7:bf:db:58:20:aa:f9:28:84:8d:0e:59:e1:
                    85:a9:e0:49:dc:ae:0c:45:f8:51:de:59:b4:a3:68:
                    b1:c3:6d:d0:0c:cd:98:f0:a0:2d:cd:d8:37:97:55:
                    9d:9f:83:b4:0b:de:70:75:78:d4:f7:63:4f:28:a6:
                    4d:ae:2b:00:40:d5:2a:6d:64:0b:21:08:44:e3:c0:
                    c1:95:39:de:a7:bf:e1:a4:3d:46:f0:b9:3d:39:19:
                    bc:1f:8f:85:d9:ac:a6:e6:37:7a:43:eb:aa:f8:82:
                    de:52:01:25:47:51:ed:fe:ef:f2:75:a7:3c:06:a3:
                    5e:80:fc:6d:73:c6:9f:61:e3:92:3f:f6:5c:df:90:
                    08:7f:cb:49:d1:b6:36:d0:8c:7d:67:a2:b9:ba:86:
                    4f:a6:11:21:3e:a1:3b:dd:04:1a:e7:99:78:ba:1a:
                    76:33:a1:80:7f:e2:42:3b:52:e7:3a:21:aa:09:6b:
                    65:ff:12:f4:68:7f:65:8d:27:a7:13:03:a4:3b:ee:
                    d0:c2:41:95:0f:8e:1e:7e:8f:ce:33:ae:11:48:9e:
                    a6:8c:0f:8b:57:07:d3:90:38:bb:81:f1:41:b5:dc:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EC:99:8A:DB:63:9F:8D:96:87:F0:DA:E3:E1:05:7F:46:6E:88:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e088b47-01c3-30ac-9a0c-08ae96be2bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f0:4d:9d:18:38:77:ff:eb:dc:ec:88:5f:bf:20:5f:94:f2:
         09:88:b5:5f:fe:94:6a:71:f7:23:49:60:e2:28:01:05:60:1a:
         02:43:40:9b:31:2e:ba:37:40:59:99:ce:56:ad:6d:3b:26:2b:
         11:91:24:01:ca:c1:83:d1:cb:48:05:1d:a9:09:b1:ac:3a:e2:
         ac:0c:7f:25:ec:b2:ba:9d:c3:f7:74:1e:99:8a:21:6e:b1:1a:
         8b:b4:61:90:6c:95:ce:2d:68:af:4e:a3:66:95:82:39:3d:e3:
         0c:8d:11:da:14:29:36:65:76:a6:3e:4d:a0:a0:c0:74:bf:e4:
         f2:3d:85:c8:28:90:b2:83:e3:12:98:21:8a:fc:16:76:86:10:
         c5:ec:a1:70:6d:de:71:e0:af:65:45:97:a4:1a:59:bf:e5:16:
         1c:11:e4:3a:c3:49:f0:c8:fc:ea:70:7d:30:57:d7:54:41:69:
         bb:a8:8a:33:b6:f8:28:47:04:9e:87:c3:dd:43:de:c0:96:53:
         1a:b0:49:2e:d8:4f:38:8d:60:c4:48:f1:eb:b5:0d:32:12:96:
         fd:a2:63:5d:6a:a8:0c:eb:8f:3b:68:48:02:ce:62:0b:55:19:
         44:99:15:d7:97:12:fd:b0:86:14:ab:2f:e1:87:f6:eb:cc:5d:
         44:8a:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:20 2026 by rpki-client