Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b3cf77-e9fe-3824-b84e-31a09bc361c4.roa
File:                     37b3cf77-e9fe-3824-b84e-31a09bc361c4.roa (raw, json)
Hash identifier:          CFxYUR+H4igrj2UAwcILclOqUXaGFlcaO/aReEmxcPc=
Subject key identifier:   50:7F:0C:39:92:99:EA:F6:50:30:13:5E:FA:77:B1:04:B5:0D:6F:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C35F600ED084D14307AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b3cf77-e9fe-3824-b84e-31a09bc361c4.roa
Signing time:             Thu 12 Mar 2026 14:31:05 +0000
ROA not before:           Thu 12 Mar 2026 14:31:05 +0000
ROA not after:            Wed 10 Jun 2026 14:31:05 +0000
asID:                     396572
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:35:f6:00:ed:08:4d:14:30:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:05 2026 GMT
            Not After : Jun 10 14:31:05 2026 GMT
        Subject: CN=0b4ce659-b86e-4f08-b5fd-5756581398ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:87:7d:10:7a:31:50:4e:d9:dc:60:ff:b1:f5:
                    09:3f:c4:38:ff:ca:f7:54:f2:04:1d:16:f4:ca:9a:
                    89:43:b0:40:73:9c:d5:2f:54:29:8a:d4:19:92:4c:
                    a8:42:24:d1:80:4e:4a:69:08:ef:0c:12:aa:d5:46:
                    d8:44:e3:54:c1:15:59:ce:74:39:69:39:24:f9:da:
                    d3:e6:2f:12:79:84:e8:0b:f8:a3:44:ef:df:41:35:
                    ee:14:f9:ff:2a:7c:83:b8:5d:08:53:fd:9e:e5:b8:
                    ff:af:f5:5a:72:dc:00:6f:16:3b:20:db:bd:b2:ac:
                    51:09:e2:d0:a5:3b:fd:81:32:58:4b:ad:9b:3a:d6:
                    45:d6:4c:89:e3:ca:50:8b:eb:da:1f:29:f7:7e:c1:
                    bc:3b:99:86:f9:68:3a:55:2b:fd:62:c8:cf:26:f4:
                    6c:e2:83:f9:03:e4:14:7c:ac:a6:2d:70:f1:cc:4c:
                    71:ce:00:74:2c:ac:a5:f0:32:06:8c:1c:9b:ac:3e:
                    37:1e:96:cf:03:47:6d:44:bc:a8:45:56:02:3b:f5:
                    23:ac:53:78:22:2d:bc:3b:0f:ce:d8:95:e7:95:c9:
                    67:87:2d:dd:17:15:b4:85:21:b2:ab:3c:c9:ba:49:
                    f8:06:f3:37:fd:ec:64:a4:58:96:6c:3d:a6:be:11:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7F:0C:39:92:99:EA:F6:50:30:13:5E:FA:77:B1:04:B5:0D:6F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b3cf77-e9fe-3824-b84e-31a09bc361c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:7d:60:c9:bc:0e:b7:7b:0d:af:a6:f0:4a:cf:64:ee:db:
         82:83:68:e3:da:d8:8e:41:3e:c5:7d:67:68:a9:27:4f:cf:e5:
         64:06:1e:f3:0d:fb:4c:be:d0:6d:2a:2d:49:bc:72:08:ee:60:
         aa:3f:5c:d5:19:e5:5f:e2:14:2e:2d:d0:93:b5:12:c2:36:b4:
         8f:41:73:07:a1:99:fa:75:21:24:a2:7a:ca:a3:7d:77:af:b1:
         b1:f6:58:f5:c1:e2:dd:ef:f8:ac:b7:9f:08:7a:fc:88:a4:05:
         4a:aa:84:dc:47:fe:2a:b9:2b:cf:50:15:69:49:f8:d7:98:8b:
         85:56:38:e2:84:a7:02:90:c7:ec:1f:9c:56:dd:9f:fb:ac:0f:
         52:d7:aa:be:00:a5:0b:8d:fb:e4:86:34:a5:27:2c:a8:58:69:
         23:84:36:53:37:7c:f2:a0:e3:6b:45:05:2b:6c:c1:57:ff:8e:
         12:81:3b:df:62:f1:37:70:21:89:ca:05:5d:ed:bb:ea:12:26:
         d7:f0:7b:14:a5:bc:eb:1c:8d:c7:60:f9:53:22:21:b0:a3:48:
         9c:56:be:3f:00:3d:75:29:6f:80:5d:8c:19:0f:67:ab:ef:f3:
         ce:19:1e:e5:ea:00:27:e5:84:a1:6f:72:b2:c6:ac:26:c1:9e:
         0c:83:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:36:38 2026 by rpki-client