Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41923a70-23d5-32a0-9e99-5c8593932fe4.roa
File:                     41923a70-23d5-32a0-9e99-5c8593932fe4.roa (raw, json)
Hash identifier:          nV63oU8eXgmpsKgcdRMhtIdvsEcDn3OAHVEMNKT92BE=
Subject key identifier:   02:08:38:8D:80:A1:8E:61:9E:67:0B:0B:61:F6:9E:55:54:CD:52:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C32A0BC53E578B132F240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41923a70-23d5-32a0-9e99-5c8593932fe4.roa
Signing time:             Thu 12 Mar 2026 14:31:04 +0000
ROA not before:           Thu 12 Mar 2026 14:31:04 +0000
ROA not after:            Wed 10 Jun 2026 14:31:04 +0000
asID:                     396573
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:32:a0:bc:53:e5:78:b1:32:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:04 2026 GMT
            Not After : Jun 10 14:31:04 2026 GMT
        Subject: CN=1989aeeb-10b9-498e-81d0-6630b9c74c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:e5:30:cc:e0:3b:61:33:d6:2c:a4:0e:3c:
                    08:36:7b:20:38:d7:d4:29:91:53:c6:0b:5d:92:a4:
                    e3:35:4d:39:3e:de:b0:6a:83:57:81:c8:0a:8f:07:
                    60:82:05:de:27:c6:e3:76:84:4e:2c:e6:19:ef:5c:
                    27:a1:b9:f9:29:85:ec:c0:5b:c2:c3:22:eb:a1:d2:
                    63:f5:d2:2c:97:ff:9e:40:30:4f:0f:a7:65:8e:0f:
                    0b:e4:e7:40:28:31:02:dc:b1:07:fc:d9:6e:76:be:
                    40:90:34:47:3d:6c:b7:67:54:82:26:73:5b:15:74:
                    f8:41:e4:f0:55:b7:76:a7:8e:63:1e:fc:55:e3:04:
                    59:bc:1e:15:3a:a3:04:01:07:21:34:91:d2:b2:ca:
                    2b:96:fc:0c:36:10:f5:4d:4c:47:30:87:b0:22:95:
                    54:e5:6f:f4:cb:8c:65:49:30:d3:bd:96:74:20:c6:
                    f7:9d:39:14:44:5e:6e:c2:19:99:0d:5f:22:9c:bb:
                    7b:fa:c9:c3:d9:18:fb:26:93:34:da:72:16:c7:11:
                    0a:18:40:07:93:ab:2d:9a:2e:24:da:e6:c9:3a:09:
                    35:5f:73:03:2d:2d:b9:95:c4:cd:59:c9:3c:39:a5:
                    87:28:6c:4c:e6:df:ff:3d:b3:8d:a3:4a:c1:32:e7:
                    eb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:38:8D:80:A1:8E:61:9E:67:0B:0B:61:F6:9E:55:54:CD:52:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41923a70-23d5-32a0-9e99-5c8593932fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4d:dc:ff:d2:d0:dc:67:a1:7e:aa:3b:51:4a:b5:8d:94:50:
         ee:3a:95:53:2f:c4:2f:eb:6c:d3:85:14:65:0e:b7:f0:9c:cd:
         80:94:06:f3:0e:20:71:75:b3:37:5d:a9:4b:fc:74:08:f4:64:
         ad:e4:df:60:38:ae:2c:0a:da:dc:2a:2c:b3:6b:e9:f6:0e:5b:
         39:98:b5:52:0a:ce:f9:c5:81:3e:e1:e1:96:f2:e0:a6:d8:64:
         37:bf:91:24:bf:70:f4:94:31:7e:02:0b:dd:a4:32:16:b6:03:
         5a:76:58:46:a1:d5:f7:89:58:49:57:63:7a:68:da:b6:60:23:
         58:a9:01:c0:30:ea:76:42:4e:a2:d3:da:ee:12:96:dd:15:40:
         53:72:ca:2a:3d:7f:a1:1b:a2:c1:11:c1:66:bc:b4:87:98:f7:
         0b:fd:0f:d8:9d:fa:87:ec:46:f3:7c:52:2f:82:7d:ae:ac:2a:
         60:85:75:8d:1c:d6:92:6b:b3:8f:42:47:0f:9b:ab:43:08:87:
         68:29:11:5d:d8:45:04:4d:41:09:9b:20:6d:e1:b4:7f:41:9f:
         8b:b2:41:99:15:0f:26:bb:7a:1e:82:b4:3f:8d:46:35:64:ed:
         59:67:38:a9:ff:77:a6:74:14:d9:e7:ac:1e:ba:50:1a:df:3e:
         a5:7e:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:03 2026 by rpki-client