Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fc5881f-db80-3031-b6cd-4f82dcc97bfc.roa
File:                     2fc5881f-db80-3031-b6cd-4f82dcc97bfc.roa (raw, json)
Hash identifier:          30wd0nGNm7f05RAe+1PDVxfAiePyQTF4iBji385eogY=
Subject key identifier:   4B:97:58:39:36:93:95:A5:DB:91:71:EA:FB:F8:A6:D8:0E:59:B1:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C3023C2F848693DA6D9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fc5881f-db80-3031-b6cd-4f82dcc97bfc.roa
Signing time:             Thu 12 Mar 2026 14:31:02 +0000
ROA not before:           Thu 12 Mar 2026 14:31:02 +0000
ROA not after:            Wed 10 Jun 2026 14:31:02 +0000
asID:                     396574
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:30:23:c2:f8:48:69:3d:a6:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:02 2026 GMT
            Not After : Jun 10 14:31:02 2026 GMT
        Subject: CN=4ecb42ed-4327-4cd1-9df0-90e4f160a026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:77:e2:c0:fa:0b:bd:b9:89:f3:ed:48:6a:
                    f2:1e:79:4f:46:20:37:ce:ed:23:1d:b6:19:3c:fe:
                    7c:56:27:82:70:9a:b3:d8:d1:43:1f:df:dd:8f:d1:
                    41:08:f6:38:af:71:5d:0c:5b:1b:1a:d5:80:e8:b7:
                    31:b6:88:03:fc:c4:df:25:3e:50:52:96:b1:06:4e:
                    c9:fc:1e:d8:b4:a8:ff:1a:b3:93:2f:d7:57:bf:20:
                    41:4e:f1:e9:58:78:1e:bc:30:cf:e7:a3:fd:f4:ce:
                    d6:0f:27:24:aa:bb:f3:cd:ef:88:7a:b1:10:7d:29:
                    21:55:0c:c2:7a:54:48:b1:3e:38:04:91:aa:12:1f:
                    4d:81:87:72:0a:60:ed:4c:0b:1b:63:6a:37:30:60:
                    b3:56:79:89:74:12:ff:06:88:a7:29:ef:4a:01:e6:
                    e7:44:c6:50:b9:bb:4d:f8:fc:6f:cc:ad:78:a3:20:
                    1f:4b:c6:22:0f:b6:89:36:09:97:c0:b4:14:5f:1a:
                    5b:4c:f0:84:e2:ca:83:20:c8:6e:42:1b:4b:11:b3:
                    d9:f1:b8:89:cf:61:48:73:38:a2:88:6e:bd:77:7d:
                    eb:dc:76:34:b5:76:27:1a:16:f2:9d:8e:3e:3b:67:
                    48:80:40:a5:3b:78:04:81:f5:9a:ca:b7:ed:87:70:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:97:58:39:36:93:95:A5:DB:91:71:EA:FB:F8:A6:D8:0E:59:B1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fc5881f-db80-3031-b6cd-4f82dcc97bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:7d:27:ae:76:9f:e1:fe:ae:97:fd:01:68:8e:5c:eb:e2:
         b4:75:ce:90:8a:10:97:eb:e4:6c:c4:19:5e:a3:7b:5d:e6:db:
         ad:94:00:65:ef:e2:3e:00:35:d1:ef:8b:30:b8:00:9c:0a:20:
         ea:88:18:55:9d:6d:61:51:e1:f1:2e:7c:39:7e:46:78:f3:57:
         49:7a:3b:fe:ab:2d:be:2e:89:fa:c8:7d:fd:da:a3:04:0f:7f:
         4b:3f:03:bc:2d:74:75:32:2a:c6:93:bf:ad:e4:83:68:c8:41:
         85:e1:d1:82:c9:31:76:13:e2:8f:e1:4b:9e:d9:cd:97:b4:c0:
         23:9a:19:fc:33:0a:d1:7e:20:93:5d:e3:8f:7f:87:ee:a1:b5:
         42:ee:11:06:b5:9c:20:32:48:b5:fa:51:7c:3b:3d:29:83:c4:
         61:53:c4:26:bc:31:d7:df:14:54:29:52:8c:60:cf:5c:28:02:
         f7:a4:f6:8c:ac:ec:e1:91:45:0a:0f:93:b8:84:1c:44:58:43:
         40:f6:1d:c6:8a:94:ce:dd:64:48:48:f0:39:61:a2:84:dd:a1:
         92:07:b5:f0:7c:b0:52:f5:c2:1e:61:51:b6:eb:76:29:19:d7:
         67:21:6d:b5:69:a7:0f:e1:66:f0:bb:38:41:f2:c8:ef:c3:b2:
         f4:cb:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:17 2026 by rpki-client