Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e0554c2-b6df-36b8-af02-54cb1c44927a.roa
File:                     3e0554c2-b6df-36b8-af02-54cb1c44927a.roa (raw, json)
Hash identifier:          hevU8vC9NwSvffpnFIQgUm10WiZ8syfx1yLmf9vcvXk=
Subject key identifier:   8F:17:6E:7C:63:69:32:39:E9:5A:DF:1C:81:DA:D6:EA:CD:8C:1B:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D32F5A4727B742568EB6C9A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e0554c2-b6df-36b8-af02-54cb1c44927a.roa
Signing time:             Tue 17 Mar 2026 14:06:56 +0000
ROA not before:           Tue 17 Mar 2026 14:06:56 +0000
ROA not after:            Mon 15 Jun 2026 14:06:56 +0000
asID:                     396581
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:a4:72:7b:74:25:68:eb:6c:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 17 14:06:56 2026 GMT
            Not After : Jun 15 14:06:56 2026 GMT
        Subject: CN=3e938fe6-fae5-43cc-8797-144a75b22d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:bc:40:60:b6:c2:ae:45:51:06:b6:61:9a:
                    8f:aa:fa:73:f3:10:71:9e:9e:f2:c2:9c:b6:50:04:
                    f1:3a:a6:47:61:3a:1a:9c:a3:95:d2:dc:a2:b3:76:
                    fe:af:d8:b8:32:81:36:17:5f:da:07:5b:bb:50:ec:
                    99:76:1b:1b:5f:a7:49:5a:8c:86:7e:d8:54:98:20:
                    5d:9b:55:28:cb:97:08:eb:f4:65:2b:7c:bd:b1:47:
                    18:09:b5:4e:01:e5:2d:90:73:8d:aa:67:2e:3f:9d:
                    f2:11:99:5a:93:cb:f5:46:22:94:59:3b:1a:d9:f6:
                    45:ac:1e:4b:74:37:bb:89:e9:bb:44:d1:c2:e5:7d:
                    28:c2:ba:e9:42:00:0e:6e:df:3d:9e:5b:11:d0:ac:
                    d8:a5:66:fc:2e:22:b6:16:66:1b:63:7c:02:18:d9:
                    9f:10:58:46:d9:82:74:27:78:a3:0d:9b:53:7b:38:
                    03:b4:0d:e5:91:0d:3d:02:26:19:15:05:84:3f:77:
                    36:fb:3e:f8:90:51:6a:c0:7a:c0:95:35:45:a0:84:
                    00:cb:b0:e0:b0:1e:84:d7:c1:27:cb:1d:29:c8:8d:
                    8d:86:61:71:42:97:f6:b8:09:3c:90:ea:e0:3d:58:
                    1a:87:ef:e0:dc:0c:73:42:fa:cc:14:ef:11:69:1e:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:17:6E:7C:63:69:32:39:E9:5A:DF:1C:81:DA:D6:EA:CD:8C:1B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e0554c2-b6df-36b8-af02-54cb1c44927a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:56:76:08:7a:fd:61:a2:ef:8e:df:e2:ef:40:31:01:88:44:
         5c:ac:dc:67:b0:26:d9:8a:fc:1f:17:e3:ba:75:fa:8e:2e:bc:
         26:ba:54:87:9f:c2:fb:a2:99:0f:37:25:78:36:20:82:c3:66:
         85:b5:13:4a:9f:35:33:d7:9f:66:04:62:c2:21:11:94:f6:01:
         b2:a1:e0:0a:ea:37:fc:20:a9:07:11:2e:99:18:4f:80:01:30:
         34:26:91:b6:cc:b8:37:7a:61:e9:29:08:87:67:41:45:86:de:
         54:94:64:4a:6a:2b:f4:f6:16:2c:21:3a:aa:25:31:76:d9:c8:
         68:9a:ee:05:86:6c:8e:0d:5c:e2:25:8f:81:bb:e2:aa:5d:5b:
         e9:d6:75:26:03:ad:94:4f:75:bc:90:31:60:37:9e:06:e9:99:
         33:9d:65:33:65:9a:ed:50:a7:82:ab:3e:48:9e:32:4d:08:e3:
         90:d3:dc:d7:51:b4:66:50:28:b8:0d:7c:79:da:59:68:e1:fa:
         ae:ec:10:fb:be:dc:1b:73:53:14:b5:a3:81:55:4e:e4:76:71:
         ab:99:57:83:5c:e4:af:75:d6:23:be:c1:8d:60:c5:50:9c:25:
         7a:ac:a3:bf:e8:c2:f3:7d:12:c2:35:75:d5:8d:b5:89:36:dc:
         6d:97:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:14:25 2026 by rpki-client