Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34bf8df5-58a5-3612-bbf9-a6f72a6b0987.roa
File:                     34bf8df5-58a5-3612-bbf9-a6f72a6b0987.roa (raw, json)
Hash identifier:          gLjfVLNmgFCDNeVIf9OiT4Xija6ni1RQsvDvP4eYMTQ=
Subject key identifier:   F3:15:53:49:4C:FA:B2:5A:23:F1:08:61:99:16:CE:D2:89:BA:70:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A5A5122D438AFDFC3F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34bf8df5-58a5-3612-bbf9-a6f72a6b0987.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396625
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:5a:51:22:d4:38:af:df:c3:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=7a57882f-4c44-4f78-8140-490a9dcdaea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:53:a2:5e:7e:11:22:bd:3b:18:a2:4f:1e:fc:
                    ea:5d:8d:6a:fa:dd:87:14:12:ab:ed:68:a8:42:d8:
                    d4:1b:d6:4b:83:be:f6:a9:19:18:ca:54:1f:93:fc:
                    d1:54:5d:36:b1:c7:d5:4d:b9:9a:58:57:e4:56:fa:
                    2e:4e:87:e9:7e:61:36:1d:88:cd:8e:59:5d:71:ab:
                    d9:ad:b6:2f:ec:44:a4:c1:b2:3e:18:d9:61:7e:ef:
                    ff:c7:19:1c:18:7e:83:8c:fc:08:e0:7d:63:07:53:
                    bb:78:3a:b0:49:8d:5c:c6:c4:e1:df:0b:c3:c3:dc:
                    8c:7b:a9:74:f6:0d:1b:4e:61:10:b7:61:f6:ff:e3:
                    67:41:6e:b9:1f:5b:86:7f:12:0e:43:2e:ea:27:d4:
                    9f:29:00:d1:f2:61:32:03:e4:34:c7:79:d8:88:a9:
                    46:c0:4c:9c:f5:3f:92:1b:ef:cd:a7:ab:0f:bb:56:
                    a0:db:7e:f7:7b:d4:94:cb:a1:0f:f1:56:1d:69:05:
                    21:22:03:43:f9:db:59:d9:04:5f:d9:27:50:05:b1:
                    8d:24:e7:35:c4:29:09:be:a7:9b:ec:3a:b7:5c:dc:
                    16:71:1d:9e:71:f9:e1:bc:c8:32:e8:e1:73:e8:47:
                    a1:bd:20:ce:26:12:17:68:20:a2:92:b6:68:a4:27:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:15:53:49:4C:FA:B2:5A:23:F1:08:61:99:16:CE:D2:89:BA:70:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34bf8df5-58a5-3612-bbf9-a6f72a6b0987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:02:a5:fe:cb:1d:6a:2c:e3:99:2b:a3:c9:25:c5:64:b9:
         ca:e8:8f:c8:52:04:1a:ad:ab:06:23:08:8d:55:92:9f:a5:7b:
         4c:31:97:a4:b5:74:98:ff:96:2f:9e:e5:10:21:68:55:3d:b8:
         a9:d8:6b:63:c7:a6:80:66:e9:0a:db:cd:7f:d1:5e:9d:6a:02:
         ef:76:6e:21:3e:0a:ed:80:ec:06:8c:b5:4b:47:b6:49:00:b6:
         67:1d:15:e5:cf:07:1b:a8:86:f1:b7:c2:98:69:2e:84:5e:99:
         5c:82:d2:6c:24:c6:52:53:75:10:b1:ac:73:93:7e:73:e1:ec:
         66:0d:fe:60:1c:9e:92:d3:d3:93:21:9e:e1:68:6f:ea:b8:46:
         b8:13:8d:6a:c4:0f:72:88:9c:f7:f8:3d:65:d5:93:a2:54:dd:
         dd:2e:d3:f2:03:d3:1d:5c:ef:d1:3a:0c:b8:68:f9:c2:48:06:
         39:a2:ae:1a:f5:d5:4d:4a:ee:26:b2:36:49:10:48:60:0e:e8:
         3c:61:03:0d:9f:4b:a1:70:67:be:c5:47:94:6f:ac:5e:f7:e5:
         dc:fe:e3:ef:0b:04:d8:6d:c0:73:c9:08:73:f0:59:00:e8:8b:
         7f:6f:cb:f4:cb:4d:94:a8:7b:f6:ab:14:a6:4a:81:c9:e9:af:
         20:2e:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:20 2026 by rpki-client