Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa
File:                     47d1cdc4-2974-3633-8fbc-02664a883456.roa (raw, json)
Hash identifier:          odsFIZ4ZD8Pj7knhuDT1SzC8OjXx4tmyTMig4goxKRQ=
Subject key identifier:   CA:31:5A:6F:E7:55:73:28:EF:92:AF:FC:35:98:B5:CE:F1:9C:F0:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0BDD1357B1D88C8976DFB580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     396549
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:13:57:b1:d8:8c:89:76:df:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=0359984e-4cb0-4a40-98ed-3dd1dbdc0e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:70:77:48:c6:14:df:40:be:4f:87:80:f8:
                    89:ab:e1:db:83:4f:29:72:f2:9e:72:d0:71:c7:2e:
                    3b:4c:d9:c0:94:04:aa:6e:ed:90:63:7f:6e:ca:4a:
                    c3:9f:4f:01:f5:87:58:fd:9e:fd:c9:0d:1e:3b:6e:
                    bb:c3:eb:53:bd:51:bc:08:27:d1:e4:51:32:1b:3c:
                    43:71:2b:10:e8:ac:bc:dc:10:ce:79:66:54:95:b5:
                    91:30:cb:cc:b6:0e:10:79:97:61:68:29:22:e7:59:
                    7a:63:1d:c3:8b:c1:57:75:99:8a:9b:90:32:7f:de:
                    ec:b7:21:31:72:7f:35:41:c0:95:02:2e:7a:8f:5a:
                    0e:8e:54:aa:db:0f:90:ca:3a:e2:34:6a:b3:d4:a3:
                    5b:16:ad:7d:c5:90:e0:44:f2:eb:d9:fa:f9:51:e2:
                    51:b4:e4:f4:3d:16:34:1b:91:89:7e:3f:a4:6a:d4:
                    a9:57:5a:98:ff:85:e3:34:33:9e:41:e5:16:81:a7:
                    50:13:2d:68:46:fd:4a:44:ef:19:53:9f:88:81:b4:
                    40:89:5b:7e:d4:6e:f3:d9:71:2d:88:46:44:f2:45:
                    94:7e:63:70:eb:ca:a1:aa:0b:9f:61:ad:63:bd:08:
                    aa:f7:13:c7:80:d5:fd:08:63:e3:99:dd:2b:38:ec:
                    c0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:31:5A:6F:E7:55:73:28:EF:92:AF:FC:35:98:B5:CE:F1:9C:F0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:46:55:42:05:f8:44:02:01:28:fe:e9:ea:09:36:8c:ab:
         03:eb:1d:3f:1f:67:a3:18:81:8a:39:23:4d:b1:a7:85:8f:6f:
         a4:8a:c9:4e:15:a1:83:fd:82:b9:d3:2e:fe:4c:42:01:be:12:
         4f:3d:94:94:da:2c:e5:df:2f:62:db:93:3d:68:f2:9a:7f:da:
         e5:93:da:5a:1f:b4:56:0b:01:ee:30:c1:4b:ca:63:8a:e0:1e:
         81:0a:85:f4:89:bf:55:7e:aa:13:f1:0f:0e:d6:d1:57:8b:0e:
         d9:c8:d7:c9:34:55:7f:82:31:46:54:d9:ed:fb:14:ae:d3:ca:
         98:ef:38:25:83:fe:67:12:29:36:eb:b3:ac:64:70:6b:2b:6b:
         83:54:cf:e7:d9:3b:6b:f7:b3:1f:39:8c:41:ba:ba:a4:b5:b6:
         64:c5:9a:73:80:3b:76:5a:19:f6:14:bd:a2:34:e9:49:cb:af:
         18:6a:59:2e:da:76:8e:ea:c5:35:1e:3d:36:94:df:56:64:90:
         09:19:6e:e4:9c:0a:00:3f:26:5c:55:54:fe:c8:49:81:ef:31:
         1f:00:7a:6d:dc:05:6d:9f:41:df:18:5b:e7:a5:0b:ba:d1:38:
         79:a8:e5:b8:9d:2e:b2:70:05:20:3d:82:82:ca:1f:4c:15:9d:
         13:e7:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:02 2026 by rpki-client