Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c56efd-d3b1-3870-be4e-227180150280.roa
File:                     31c56efd-d3b1-3870-be4e-227180150280.roa (raw, json)
Hash identifier:          Aqm9KoNvAM2zEPUL1wgBua7w0ApMVjwVcjI+Q4hxxfA=
Subject key identifier:   4A:BD:8F:22:3E:6D:40:DB:D8:67:03:51:94:6A:5C:46:FC:B8:EE:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C0365B42091F8AE28752680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c56efd-d3b1-3870-be4e-227180150280.roa
Signing time:             Tue 03 Mar 2026 15:18:07 +0000
ROA not before:           Tue 03 Mar 2026 15:18:07 +0000
ROA not after:            Mon 01 Jun 2026 14:18:07 +0000
asID:                     396585
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:65:b4:20:91:f8:ae:28:75:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:07 2026 GMT
            Not After : Jun  1 14:18:07 2026 GMT
        Subject: CN=f30386d7-5ba0-4ec0-adbc-a78432426941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:1f:49:e3:22:2b:ee:c4:75:d1:df:89:2f:
                    30:47:4f:a1:d7:a8:c2:38:27:e2:2d:1e:78:ca:fe:
                    27:bb:e4:cf:a9:b0:72:6f:da:03:18:72:19:77:cf:
                    9e:ac:f8:2f:6a:33:36:e4:fa:49:48:9e:03:b4:c4:
                    b4:f7:d5:e6:39:cc:ae:e4:b4:10:f5:56:ff:c5:79:
                    36:01:ca:80:7b:37:54:6f:95:d8:6d:b4:94:ab:f5:
                    a5:ed:f8:89:37:71:36:ab:ce:ff:66:7e:46:b0:c4:
                    96:83:ab:59:d0:e4:a5:a4:0f:1b:66:f4:9c:92:67:
                    75:02:10:ac:ca:5d:86:c6:d8:c2:02:61:78:75:ea:
                    18:43:11:75:d4:33:7e:4e:85:d7:82:c1:84:c0:57:
                    f8:4a:78:97:da:12:18:e6:ba:f2:1d:67:c0:95:62:
                    9f:b3:f3:08:44:31:ae:c2:65:7a:92:18:03:89:0d:
                    4f:d5:2e:41:83:e8:3d:93:f6:f3:f6:2c:ae:a1:5f:
                    7c:16:e8:d7:4a:12:df:0c:29:c7:c0:2d:56:a8:c5:
                    7c:03:d3:5e:fd:26:4c:8a:3d:ac:b3:a5:69:c3:21:
                    02:8f:91:b5:8f:5c:32:02:f9:08:12:78:7c:89:f1:
                    53:3b:8b:b4:56:63:61:cb:c9:be:05:92:5d:c6:00:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BD:8F:22:3E:6D:40:DB:D8:67:03:51:94:6A:5C:46:FC:B8:EE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c56efd-d3b1-3870-be4e-227180150280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:73:ce:aa:bf:47:71:4c:03:fc:67:18:c5:c0:43:87:27:cb:
         5c:b9:c4:4f:5d:07:71:b0:49:a7:27:52:06:27:34:02:9d:14:
         07:3a:28:9d:7f:22:7c:21:75:00:34:19:ed:f4:6f:cc:10:02:
         7e:d6:2d:2b:ce:ea:8c:51:49:8f:67:cb:0f:1b:92:6d:10:52:
         bc:22:80:be:9a:8c:85:ae:b3:54:5e:c1:e1:31:9d:ea:08:30:
         4b:14:83:da:43:d7:a4:ab:c2:bc:29:87:7b:cf:e5:0d:64:0d:
         83:47:76:e3:35:33:f7:db:05:2d:c9:6f:be:7e:7c:d1:e5:0d:
         2b:2f:a7:60:5c:ea:a7:3f:3f:f0:ae:32:87:d8:19:c0:0a:f2:
         3f:00:d4:f9:13:c1:77:2a:21:3d:55:27:ba:4e:3d:ab:d0:72:
         f5:7b:ee:71:13:11:fe:48:51:92:d6:d6:f9:9b:ba:a8:ce:da:
         86:39:48:19:dc:40:a6:ca:e7:87:71:82:7a:31:31:77:9d:7a:
         00:c6:0b:7f:58:44:a0:42:29:db:b8:d3:d2:b5:2f:ed:fa:bb:
         fd:9c:80:ae:41:ed:ef:6b:75:79:77:8d:e0:3b:39:ed:f3:a0:
         4f:15:b3:c2:62:5e:2c:f5:53:14:f1:9e:22:8c:76:1a:3e:0a:
         fc:32:47:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:16 2026 by rpki-client