Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3e9f4-b7dc-3483-bec9-bd341bdacf88.roa
File:                     49b3e9f4-b7dc-3483-bec9-bd341bdacf88.roa (raw, json)
Hash identifier:          DAF4/MfJRHyIEEfvDI7xjYJJai19zBsLNcU0J75e5ZA=
Subject key identifier:   E3:A8:DF:D1:E4:83:AE:DB:A3:3E:A8:4D:A3:09:22:78:6D:6C:50:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A6868EE42141065A03680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3e9f4-b7dc-3483-bec9-bd341bdacf88.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36632
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:68:68:ee:42:14:10:65:a0:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=57ed8d4e-93c4-44e5-b1a6-93a6c0e0159c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:49:77:2f:5e:df:b5:60:69:29:8c:c3:e1:
                    0d:0f:3d:6d:e3:57:09:8f:c0:5e:ad:24:c0:d9:53:
                    8f:36:a1:3e:e6:7a:0d:67:33:8f:49:8b:87:71:71:
                    44:65:61:05:ab:cc:98:59:95:de:b0:8f:9f:09:b0:
                    ce:5c:56:af:93:c4:9c:c6:a9:db:9c:cc:0a:94:3f:
                    da:dc:1f:1b:df:d7:f3:e5:f7:3b:65:e2:fa:7b:a2:
                    14:b6:78:ce:9a:25:90:b4:e7:83:de:60:d6:42:cc:
                    06:00:ae:db:25:df:64:31:43:38:09:88:c3:12:c0:
                    f9:5a:fd:95:bc:15:67:f8:dc:63:a3:97:99:66:b8:
                    8a:da:aa:64:e3:3e:91:af:20:cc:6a:bb:df:ed:68:
                    e2:90:57:3b:38:33:57:02:b0:cf:51:37:15:22:b7:
                    1c:cf:21:33:37:53:6a:55:e6:30:3e:37:1a:6a:15:
                    71:e4:fd:a1:fc:9d:69:7a:d2:0f:7b:5a:74:a9:8e:
                    63:7b:e0:0f:dd:a9:17:1d:55:97:e6:b9:3d:6a:9b:
                    1a:5b:ec:9a:2a:53:03:76:f9:a4:88:03:e2:67:b6:
                    e4:0c:bb:0a:b9:48:32:11:df:f0:06:36:90:e7:c8:
                    59:0b:77:27:0e:52:43:8f:d4:b7:c4:1a:aa:d8:6f:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A8:DF:D1:E4:83:AE:DB:A3:3E:A8:4D:A3:09:22:78:6D:6C:50:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3e9f4-b7dc-3483-bec9-bd341bdacf88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:be:bb:d8:8e:fb:53:9b:ee:e7:01:fb:b6:16:69:9c:6d:ed:
         ae:70:43:08:e0:1a:18:c9:c9:19:60:88:6d:aa:77:b7:ed:2d:
         2a:05:8a:26:66:a8:dd:fc:57:e5:18:b1:b4:c5:7c:26:67:6d:
         74:a1:bb:a0:ba:26:a9:dd:d1:5e:1c:c3:de:ba:95:3e:db:f6:
         9a:3d:ac:20:7b:eb:ab:83:98:a6:cb:eb:8e:ef:fe:dc:e4:cd:
         58:8d:9b:31:bd:25:4e:a3:8f:3f:3a:30:00:7c:fd:67:b4:64:
         44:0b:0a:2e:74:26:a5:62:f1:d4:f0:3e:2e:9a:60:12:34:1b:
         32:b5:71:1f:5c:04:e8:1b:c3:0a:21:a7:3e:85:81:70:0d:5c:
         f9:72:f6:f6:a4:2c:ea:6a:fa:6a:2b:70:d4:64:ad:ec:06:8f:
         99:99:15:b3:7b:8b:e7:a2:ed:ac:93:f8:96:5e:d2:78:4f:d6:
         95:c5:f0:e2:f0:f7:cf:73:b3:8c:51:3a:b1:e7:a7:91:ce:60:
         99:2d:80:42:70:1f:e1:1e:0f:cf:3c:cb:87:d7:20:8f:68:f2:
         f9:8f:b8:52:29:c9:6b:5c:be:cf:99:f7:80:f7:a8:f3:fa:8e:
         d7:7f:d9:5f:4d:2d:fd:0a:37:ef:99:5f:b0:db:b9:f9:44:e7:
         ea:e1:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:40 2026 by rpki-client