Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35474fdb-0013-3406-88f0-ad6ffa26fd89.roa
File:                     35474fdb-0013-3406-88f0-ad6ffa26fd89.roa (raw, json)
Hash identifier:          VGmNb2Xp50NA3zJhR+Dnkax+dnGELMqxUkUi3aJBtAE=
Subject key identifier:   A2:F0:D8:BD:D5:87:09:3A:5F:D8:B9:FD:19:B4:1C:16:28:1E:E3:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F759F651F7DDB834576FC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35474fdb-0013-3406-88f0-ad6ffa26fd89.roa
Signing time:             Tue 10 Mar 2026 14:28:38 +0000
ROA not before:           Tue 10 Mar 2026 14:28:38 +0000
ROA not after:            Mon 08 Jun 2026 14:28:38 +0000
asID:                     396613
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:9f:65:1f:7d:db:83:45:76:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:38 2026 GMT
            Not After : Jun  8 14:28:38 2026 GMT
        Subject: CN=ab185162-ad3e-4df3-83a4-090790cdcf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:fb:c7:32:ac:3a:65:5f:a6:4a:e4:5d:dd:
                    41:47:f6:61:9d:33:20:95:d1:5d:f0:fb:fe:dd:94:
                    83:16:c3:7e:b9:ab:bc:5c:9e:ab:d2:bd:2e:bf:2a:
                    2d:5c:7d:38:29:f3:6b:6c:9f:32:01:28:61:d6:a6:
                    08:4e:97:ad:a1:6e:97:f5:26:31:75:de:70:df:ac:
                    9f:50:19:6e:d0:01:c9:1d:77:ff:9d:6e:db:5c:4e:
                    c5:f1:68:b9:e5:a9:b5:42:ca:ca:17:d2:24:88:bb:
                    6d:28:0c:14:5e:75:b8:63:54:3a:a4:07:e6:fc:a4:
                    f4:83:78:3c:bb:7f:31:49:55:06:fb:90:10:13:06:
                    3a:1e:7b:1d:c2:7d:5a:a3:c1:19:04:08:e8:5f:10:
                    ce:70:90:f8:c6:79:6d:7f:c6:17:6a:49:21:19:cd:
                    5c:5c:d1:cf:fc:5a:50:ce:8e:78:6a:ce:c0:32:af:
                    d7:f8:91:6c:02:09:8c:34:50:7b:02:b5:78:36:9f:
                    fb:a8:16:11:af:c0:84:51:00:ab:8f:09:8c:18:24:
                    83:ac:a3:13:7f:46:52:e1:36:ad:43:c4:4e:2a:dc:
                    11:6b:a5:f6:f1:59:5f:ea:25:4c:75:f6:05:81:1b:
                    c0:c2:3c:2c:66:23:65:06:f2:e9:93:22:69:76:e8:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F0:D8:BD:D5:87:09:3A:5F:D8:B9:FD:19:B4:1C:16:28:1E:E3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35474fdb-0013-3406-88f0-ad6ffa26fd89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:aa:0e:03:94:cf:c4:55:14:7e:7e:38:78:2d:91:c8:05:
         e8:ec:07:99:c6:35:46:80:55:41:e1:16:dd:06:e5:20:b2:ec:
         4d:7f:68:9a:44:d0:ba:79:9d:3a:7f:44:35:19:a1:6a:d2:41:
         01:2a:9f:1a:db:27:6c:3a:a2:b5:43:c5:a3:92:03:ba:7f:68:
         c8:a8:ec:e9:6c:36:49:6f:a4:01:ef:fd:07:01:7e:d0:a1:a7:
         dd:b6:79:2e:8d:a6:7b:43:1b:84:08:d4:c5:54:23:73:76:65:
         2b:c3:40:6b:55:5f:bc:46:b1:7f:8e:67:90:7b:b9:66:7f:d7:
         31:31:8d:d4:ab:0d:0f:ed:70:68:15:02:65:21:d3:52:a3:9a:
         e6:1b:95:e8:45:10:e1:a4:01:64:1b:a4:8d:ab:05:a4:94:31:
         ce:71:93:dc:ec:a5:3e:38:b3:af:8f:20:04:b5:38:be:ca:d5:
         b7:4e:82:bb:8a:ed:2c:84:a7:1b:e1:55:e9:bb:91:1a:17:4a:
         13:95:8b:b2:ec:60:7d:9d:12:2c:4f:d6:0b:95:cc:df:37:fe:
         ae:a5:71:7e:c1:7c:7e:55:5d:4c:58:55:9a:e1:7e:3d:ab:0d:
         8d:11:e2:c4:d2:56:59:ab:c4:80:f3:6b:62:02:6c:dc:86:3b:
         ea:0c:35:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:40:39 2026 by rpki-client