Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/356dd5e3-69bf-3e1a-8167-92dfd2946e4f.roa
File:                     356dd5e3-69bf-3e1a-8167-92dfd2946e4f.roa (raw, json)
Hash identifier:          TY0AhrV4IW6xuDSnbG0jojJbdoZshPcNXmHKyFgFCGQ=
Subject key identifier:   22:DB:8A:6A:F9:E1:57:E6:4A:CE:68:C2:66:0F:68:6E:4F:CC:85:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A2D624D5BFA89ECE65880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/356dd5e3-69bf-3e1a-8167-92dfd2946e4f.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396615
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:2d:62:4d:5b:fa:89:ec:e6:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=53ee5349-bd0e-4a9b-bc29-0cb0354c6c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f8:47:d1:4a:f6:d1:bc:82:eb:04:95:c4:3e:
                    5c:60:2e:d6:f6:a3:16:56:05:f3:e2:ed:3d:41:49:
                    ab:97:df:a2:46:e0:02:53:bc:4b:01:94:91:f1:54:
                    98:b6:31:0b:84:78:53:38:04:4b:0b:bc:fb:d5:3b:
                    b7:37:d6:48:aa:8d:f6:d8:9d:56:4d:e6:39:19:f0:
                    fc:a4:33:d5:4f:10:9e:b2:d5:e2:9d:a7:5a:b3:ca:
                    62:c9:0c:4a:29:d5:30:ba:cf:c0:a7:18:42:98:82:
                    57:db:1f:14:fe:55:00:71:af:15:18:7d:fd:18:91:
                    9b:a5:cf:d6:72:c6:ec:77:51:df:4e:93:1a:50:c0:
                    0d:02:df:52:ad:8f:e9:45:5a:2b:bc:ee:2a:b8:57:
                    7b:29:44:a6:0c:a3:eb:88:aa:e9:23:c5:36:44:9e:
                    9a:2f:36:44:83:f6:80:66:07:59:f8:e8:8d:77:75:
                    c0:71:de:c8:ed:68:b2:93:f6:34:56:22:d3:a9:dc:
                    0b:f4:85:d8:e9:17:f9:b4:1a:fc:d4:d1:ad:8e:ab:
                    13:4f:56:0c:c4:cf:54:63:bf:bb:21:df:c8:62:ad:
                    c1:4e:97:5a:21:4f:3a:60:dd:f7:b4:1e:43:f4:42:
                    34:a3:84:27:51:02:14:aa:84:1b:06:e4:b6:e3:4e:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DB:8A:6A:F9:E1:57:E6:4A:CE:68:C2:66:0F:68:6E:4F:CC:85:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/356dd5e3-69bf-3e1a-8167-92dfd2946e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:41:c7:91:4b:c7:8e:52:b2:d6:98:e9:c4:60:1a:6c:48:c8:
         43:03:92:f3:07:ed:22:de:c7:79:3e:68:25:19:79:3a:5a:5b:
         84:c5:59:f3:5c:42:97:aa:1b:03:6e:35:61:40:38:f6:50:e6:
         ee:7c:d8:f4:70:9c:8b:ee:6d:e8:ee:ae:43:10:31:33:42:7f:
         df:75:26:7f:a0:1f:ab:c7:00:d0:10:fd:15:c0:b3:6d:8f:66:
         48:26:6a:d6:44:40:dc:f8:bf:24:10:7a:f8:d5:1a:ed:e6:9a:
         86:8f:33:5f:bb:9e:81:76:56:3e:f2:02:b5:a4:4e:50:41:d1:
         87:b9:e3:cd:d6:37:2d:b4:c6:3f:ba:55:16:a0:77:33:31:eb:
         a7:8e:ab:22:f7:fe:3b:d2:06:4c:5d:ec:96:18:89:48:fb:98:
         23:c5:ec:38:f7:f5:2a:f5:98:c4:0a:67:70:c3:8a:4e:a4:af:
         4b:2f:89:55:9a:e7:01:4a:24:1d:c1:2f:4e:7d:08:4c:78:07:
         3a:35:92:17:9c:a6:1c:20:56:c8:83:a8:af:9d:08:26:5d:8a:
         0a:24:60:3c:d1:7f:d0:31:8b:e8:42:a7:2c:e9:5e:11:9b:80:
         ad:be:b5:d5:ee:dc:29:79:ef:ea:55:0a:68:64:4e:f5:e0:f7:
         d9:a9:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:06 2026 by rpki-client