Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa
File:                     20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa (raw, json)
Hash identifier:          Uu0MOXJZUMT2W311t4rm1IVP0Bp/ZvmiuZImypHhV8M=
Subject key identifier:   8C:A2:C7:43:F8:F8:C9:2E:05:EA:05:9C:F7:D6:FE:D0:AE:D8:E9:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A2499D544F986D446E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa
Signing time:             Tue 10 Mar 2026 14:28:39 +0000
ROA not before:           Tue 10 Mar 2026 14:28:39 +0000
ROA not after:            Mon 08 Jun 2026 14:28:39 +0000
asID:                     396550
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a2:49:9d:54:4f:98:6d:44:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:39 2026 GMT
            Not After : Jun  8 14:28:39 2026 GMT
        Subject: CN=0075b271-2527-4ea1-baf1-fe60286f0575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:58:54:93:89:7f:32:8b:72:91:06:d3:c9:
                    4f:48:76:69:da:a7:37:8b:4e:a2:e4:eb:85:a4:8b:
                    03:c7:8b:98:33:1e:c6:1b:21:7a:fa:c5:cf:88:d8:
                    40:35:a2:48:47:12:48:07:dc:22:60:17:d3:32:4f:
                    e8:9e:fd:56:8b:3f:ef:74:b5:b0:98:e3:59:8f:8e:
                    de:6b:da:45:91:a5:7e:c4:8f:de:1c:c2:1e:a6:8e:
                    a6:e0:53:41:5c:ca:61:5e:8c:33:49:e6:58:42:b2:
                    9e:85:98:cb:f7:14:7b:aa:0f:2a:88:1c:77:d5:90:
                    53:03:99:32:8f:44:9a:ce:3e:7d:ca:1c:2d:f4:32:
                    3a:63:a0:ca:d9:47:36:c9:93:36:93:09:61:25:c8:
                    ef:b8:f6:76:ae:ae:12:75:3b:8f:58:fa:03:7f:8f:
                    af:4e:3e:09:a4:dc:34:e1:f6:17:93:62:45:9d:27:
                    41:bf:7d:66:e6:ba:fc:ab:6a:c2:0e:5e:4c:05:79:
                    6c:f4:6a:7a:ac:68:9e:2f:33:3b:85:a3:1a:c0:4b:
                    95:cb:38:f1:d8:01:99:a8:0a:ed:02:15:dc:52:d2:
                    e1:b7:65:6c:0c:a3:b8:da:0f:bb:20:7d:6c:dd:4f:
                    b3:61:d7:f8:bd:6d:41:7f:25:a1:61:58:43:8c:99:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A2:C7:43:F8:F8:C9:2E:05:EA:05:9C:F7:D6:FE:D0:AE:D8:E9:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:16:33:5e:96:23:2b:00:af:45:52:a6:26:b4:23:94:4d:3a:
         e7:c9:28:ee:7d:19:01:06:43:40:62:09:e6:e4:83:7d:9f:30:
         ff:e9:d4:01:5f:20:9e:2c:65:2f:0f:6b:45:06:6c:b3:59:0d:
         9a:81:48:cf:ac:52:42:06:d7:50:34:9f:9e:c0:3e:9b:73:5e:
         43:33:71:20:af:82:b4:ac:7d:9d:78:16:e4:6e:a5:95:72:b8:
         6b:20:c1:e5:6f:77:18:5c:ad:01:10:b8:2e:70:19:8c:67:cc:
         76:56:47:9e:d4:1c:24:73:83:fb:58:72:03:10:b4:55:9a:33:
         a0:77:95:fb:5b:23:b8:fc:85:c7:db:4f:a1:ed:2b:0c:18:5e:
         be:9f:fb:75:e3:48:0d:26:d9:4e:d5:1b:9a:53:2b:7d:22:96:
         56:ae:46:16:a5:e0:2d:fe:03:0e:b6:10:a5:36:95:89:5a:7a:
         e7:ff:6e:0d:1c:67:00:0d:0b:47:5e:96:32:27:c8:88:01:71:
         39:72:b1:d9:f0:58:68:d3:5a:8c:ef:c4:d0:29:8a:11:b2:25:
         37:dc:52:c0:3b:8a:72:e4:a8:0b:4f:04:c5:96:44:0e:2d:67:
         e8:81:8f:f8:a3:f7:a2:4e:de:b7:cd:9e:0b:07:b3:29:9f:25:
         89:1f:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:34:33 2026 by rpki-client