Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4033df02-a97c-3c5b-b4a8-707c0ed19718.roa
File:                     4033df02-a97c-3c5b-b4a8-707c0ed19718.roa (raw, json)
Hash identifier:          00AuvZD3UXlUM8XohqweL9E55u4D9RDgSQ23Vy0Bc8o=
Subject key identifier:   24:4C:76:30:7B:98:FF:A6:B4:B9:E8:6F:26:B9:7E:CD:B2:EB:57:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D32F5A4D97B3DF7DF79754840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4033df02-a97c-3c5b-b4a8-707c0ed19718.roa
Signing time:             Tue 17 Mar 2026 14:06:56 +0000
ROA not before:           Tue 17 Mar 2026 14:06:56 +0000
ROA not after:            Mon 15 Jun 2026 14:06:56 +0000
asID:                     396571
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:a4:d9:7b:3d:f7:df:79:75:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 17 14:06:56 2026 GMT
            Not After : Jun 15 14:06:56 2026 GMT
        Subject: CN=eed3a638-ff01-42dd-a3fa-1b35c6350ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:5f:69:d2:8d:b9:41:57:9d:ac:37:2a:29:
                    48:e8:0c:69:5a:61:d0:8c:3e:7e:72:61:76:5b:42:
                    0d:03:1d:dc:2d:6e:68:31:75:90:66:0e:20:ab:0f:
                    6c:1d:27:f7:db:5f:37:54:4b:2f:58:a0:38:8d:f7:
                    35:ec:6c:f8:a3:a9:74:f3:74:87:4c:06:8b:bf:b4:
                    b9:ce:06:5b:ff:8c:29:84:ac:01:d6:b7:84:ec:48:
                    84:e0:8b:d2:04:4f:ba:68:d6:ba:c1:65:9b:c3:56:
                    4f:af:37:a7:ff:cd:f2:c7:6e:41:44:2e:df:91:66:
                    2a:ba:58:f1:cf:96:17:f8:6d:d7:a9:40:3e:92:28:
                    8e:1f:13:d5:de:15:9c:d6:62:4d:1c:80:7f:2f:ba:
                    88:19:18:30:f8:e9:12:41:44:4f:cc:9a:3b:39:e4:
                    a0:cb:af:4d:38:4d:47:3d:09:3d:53:63:8e:c1:ed:
                    70:5b:6e:78:18:a8:e3:51:ba:af:09:92:a4:f7:4e:
                    15:15:9b:2b:71:79:4f:88:ba:fc:53:eb:86:62:4a:
                    b0:ea:70:1e:84:37:56:82:34:9f:96:0a:8f:45:39:
                    0b:40:8e:70:ac:b2:94:80:de:73:79:bb:b5:db:ec:
                    0f:4a:7c:74:46:c5:2c:ba:6f:5d:b3:1d:47:32:9f:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:76:30:7B:98:FF:A6:B4:B9:E8:6F:26:B9:7E:CD:B2:EB:57:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4033df02-a97c-3c5b-b4a8-707c0ed19718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:7d:46:1c:da:76:6b:1b:35:7d:37:8b:4e:33:3f:65:8d:
         0a:62:e6:ef:e0:63:29:77:c9:66:1f:01:8c:85:9e:25:58:18:
         8b:b2:92:5c:17:d1:c5:e6:49:76:ac:2b:cc:72:17:fa:11:d1:
         96:83:a7:35:eb:66:cb:be:5d:40:01:32:d6:71:3e:b8:18:73:
         b0:fc:f3:21:43:c1:38:84:9a:26:be:c1:d6:90:1a:72:76:34:
         a0:4d:33:51:9e:cc:06:2f:c8:29:92:21:dd:0e:19:6a:66:da:
         f9:61:31:a7:75:46:62:d8:81:53:da:48:ee:bf:eb:1e:0c:9e:
         90:28:4e:b6:9b:14:d3:d6:85:ae:6a:b4:a7:27:02:5c:80:c6:
         55:35:59:53:cf:93:a5:d7:61:8a:86:ce:3e:38:b9:5a:f2:ab:
         98:9e:88:ec:f5:17:9b:56:c5:5d:d5:8f:69:b3:94:e6:3a:b3:
         57:91:49:6d:c4:34:11:83:13:3d:ab:14:83:82:b3:a0:71:4c:
         67:00:c9:b0:85:ce:95:8e:47:3e:e8:b6:6d:b2:21:00:34:a4:
         d5:d8:0b:ae:39:16:ee:a6:ed:c9:1e:d3:ec:76:e1:86:6e:5d:
         20:91:d3:6a:ed:5b:fe:b1:08:43:31:e3:d6:e8:59:09:9d:73:
         5d:52:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:35 2026 by rpki-client