Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48fe6789-8097-38fc-b1bc-0e84457a3a03.roa
File:                     48fe6789-8097-38fc-b1bc-0e84457a3a03.roa (raw, json)
Hash identifier:          6+hj/obGLzXsFygYQSoFf6qBiMYIzceQriry77M5iyI=
Subject key identifier:   08:05:2B:00:44:C0:81:AD:DB:5B:E4:33:01:CF:3F:8D:0B:F0:31:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E000E485CA65C1E89BB9B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48fe6789-8097-38fc-b1bc-0e84457a3a03.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     19836
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:0e:48:5c:a6:5c:1e:89:bb:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=4e857f0f-f67d-4200-b11f-f8318881809d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1f:49:f8:a1:2b:89:d3:4b:f3:63:16:c6:95:
                    6d:da:4f:e8:0e:6e:48:24:22:9b:3b:c7:25:2f:fd:
                    dd:43:0f:36:7c:f0:0a:71:a5:85:18:63:bc:f7:98:
                    83:da:29:62:e6:1c:9a:f4:29:e0:99:4a:48:c0:b2:
                    a8:87:28:57:52:b5:7a:be:56:cd:4f:09:65:52:e9:
                    af:4f:be:8f:dd:05:ff:2b:1d:60:5e:1c:3b:08:82:
                    c8:23:f0:c6:d1:d6:0a:62:ee:4a:da:1b:f9:fb:6b:
                    ac:f4:63:52:5d:0b:6f:38:93:d5:bf:eb:cf:b9:1a:
                    de:33:a4:fd:10:58:9e:57:29:fe:25:a5:03:1c:28:
                    c4:9f:3f:b8:28:84:91:9a:63:f5:29:f8:a7:ca:3c:
                    05:2b:26:ed:a4:b6:a8:d5:50:9f:ca:23:49:13:61:
                    e3:ad:0a:fb:c6:30:ca:36:12:29:f9:48:e9:77:af:
                    4f:87:ac:c0:94:43:47:9b:37:19:31:ac:8b:d3:c2:
                    a7:7e:59:f9:4f:cf:a6:1e:e8:57:f2:77:fb:5a:b1:
                    1d:15:04:70:91:41:19:d8:d0:68:7e:6a:89:2f:6f:
                    b9:ce:8d:86:a3:30:10:cc:37:b4:72:98:0d:04:31:
                    42:e5:bc:a4:72:11:56:b6:e3:60:dc:00:65:38:a7:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:05:2B:00:44:C0:81:AD:DB:5B:E4:33:01:CF:3F:8D:0B:F0:31:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48fe6789-8097-38fc-b1bc-0e84457a3a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:b6:64:f5:38:93:6e:1a:6b:ef:bd:85:6d:84:5a:b6:0f:
         ef:77:28:55:41:a9:6e:cc:df:2f:a3:8d:fa:e3:83:92:e4:75:
         6c:e3:1e:43:12:de:a8:74:9e:53:7b:10:85:77:ec:4d:dd:20:
         0a:66:a9:98:4b:a2:7e:91:ff:a7:e4:6a:fa:5d:8e:9b:a6:f6:
         30:47:07:e8:6e:1a:37:c9:17:9d:a5:88:0f:35:23:be:81:e2:
         a1:c9:7c:e3:6e:25:6e:0b:54:d8:c7:a2:13:08:ae:c0:84:07:
         33:e2:8d:b6:de:52:70:8e:ef:f9:c1:5a:e5:59:e7:4c:28:9c:
         2d:75:89:61:76:2b:4c:ef:48:24:16:5f:79:97:f1:8c:c3:21:
         1c:07:03:d2:38:8e:b4:0e:d1:83:a8:3f:d8:1c:dd:ef:fd:e5:
         3e:dd:cf:ac:56:51:45:a7:1c:69:07:78:6f:a9:e6:9b:73:67:
         68:a1:ca:d2:a8:8e:cf:39:5f:00:03:5e:0d:22:03:ae:7e:32:
         8d:3f:9b:15:71:3b:77:0c:3b:48:cc:03:a4:99:23:02:76:d4:
         ba:06:08:b7:d2:13:25:0d:8c:4f:53:01:f8:77:4c:50:f0:ef:
         06:6f:34:e3:5f:43:39:77:05:4f:db:b3:34:70:a3:ae:fc:3c:
         b6:e9:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:51 2026 by rpki-client