Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34f26e53-3562-3f33-ae2d-edbd4e1ea89b.roa
File:                     34f26e53-3562-3f33-ae2d-edbd4e1ea89b.roa (raw, json)
Hash identifier:          OGdPF+wNxWIMXSb+7NdSw0gtAdNRqMWEMZoY6Wxitpk=
Subject key identifier:   D8:D8:A1:45:9F:33:28:E7:B7:E0:24:13:3A:4E:DA:4A:C3:32:B6:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24E10FD94D7C762D50432380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34f26e53-3562-3f33-ae2d-edbd4e1ea89b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396571
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:0f:d9:4d:7c:76:2d:50:43:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=8b7585b5-acbd-44b7-a819-4bfdf90e2d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ca:f8:b0:10:02:ec:89:6b:89:ae:0e:09:52:
                    5d:bc:a3:57:73:4d:90:5b:50:27:c5:72:e7:51:9c:
                    a7:62:6a:1b:72:72:65:7c:f5:5d:8b:bb:75:2a:8d:
                    28:04:19:0c:ba:43:cd:e5:ce:36:79:57:9c:9f:d0:
                    d1:43:32:69:69:fa:89:4e:4f:4a:47:2e:3c:85:53:
                    83:db:19:87:e4:6c:6b:c6:1f:25:7a:39:bd:34:ec:
                    ca:7f:85:06:25:5a:5f:26:b9:2a:3f:e2:31:fd:68:
                    f9:97:cd:0d:cb:2c:ea:26:f9:65:04:fd:28:f2:4f:
                    1e:35:e9:dd:19:69:9d:a0:cb:06:10:74:37:aa:46:
                    8a:35:ff:e5:7c:f0:7b:f0:5b:b7:7f:38:9c:07:91:
                    b3:d4:6e:3c:07:eb:88:17:22:24:7d:20:76:f2:1d:
                    42:b5:1f:ba:8f:91:75:a5:a1:b6:44:dc:e9:49:1b:
                    e6:7c:03:db:56:51:d1:2e:7b:3b:12:dd:f7:e1:ad:
                    da:82:3c:d3:b2:0a:8e:55:32:b6:db:cc:af:2f:2f:
                    c0:71:1a:ac:14:27:03:e7:1b:c1:b2:8c:ae:de:2d:
                    52:a9:33:28:58:f0:01:53:03:1d:8f:81:82:c6:ba:
                    d5:f1:fb:3f:41:d5:8a:40:fb:ce:f6:83:07:67:96:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D8:A1:45:9F:33:28:E7:B7:E0:24:13:3A:4E:DA:4A:C3:32:B6:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34f26e53-3562-3f33-ae2d-edbd4e1ea89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:29:61:c6:63:65:67:31:9c:0a:f1:98:a8:2f:a1:b8:81:cd:
         bb:b3:4e:e0:6c:3c:9b:8b:42:c0:5e:a3:fc:dd:47:bf:d8:0e:
         6c:21:79:23:03:f4:49:9a:67:bd:1a:e7:38:31:eb:2f:53:39:
         81:b4:25:97:2e:ec:f7:85:9b:a3:e0:46:d2:0d:9a:b3:62:a8:
         5d:50:b0:c3:f4:8c:6a:3d:95:1b:d0:1e:8b:ae:eb:c1:c4:ee:
         27:97:5d:fa:00:13:0a:cd:b4:4b:59:65:1f:9c:bf:fe:12:0e:
         f8:8b:aa:9b:6e:67:97:4a:2f:a3:b5:f6:d4:47:b7:62:33:19:
         ab:b0:b1:a8:dc:96:3b:13:98:2d:72:31:b1:c8:27:8c:88:6f:
         4b:0e:ef:8f:99:ad:60:e8:16:be:2e:f7:81:48:fe:f0:87:09:
         93:4a:e7:25:80:60:61:89:f2:df:b5:7f:2d:cc:8c:8d:43:7f:
         b7:36:1e:4e:b0:a4:7e:69:1d:41:29:9b:01:31:46:f5:df:d2:
         d2:dd:7a:d8:7e:3d:e7:55:d6:14:29:c7:b9:09:2f:57:33:7e:
         5b:f1:4a:0a:c5:a8:22:c4:7d:db:ad:07:47:f9:39:75:fd:4e:
         6a:79:0b:ef:a5:1a:d8:17:a0:47:7c:70:41:90:fc:dc:c4:05:
         9c:05:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:41 2026 by rpki-client