Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b94d3a8-4047-3be8-8b54-5471fb04b6ba.roa
File:                     4b94d3a8-4047-3be8-8b54-5471fb04b6ba.roa (raw, json)
Hash identifier:          kR+qQQcFc81+9fjBNEYIPRwLQ+1OFCcyeZdkLnZUhPo=
Subject key identifier:   2F:C5:04:24:94:3F:A9:EC:A8:2A:C5:52:B3:3B:35:9A:0B:44:88:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D71B236E1F87092711800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b94d3a8-4047-3be8-8b54-5471fb04b6ba.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     397206
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:71:b2:36:e1:f8:70:92:71:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=da9cda8a-b828-4169-8b91-632c32802efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:49:26:b3:7a:3d:9c:e8:fa:39:d7:56:2b:
                    c3:f0:60:24:cb:d2:6a:40:e9:ec:84:b0:ae:c5:d9:
                    57:db:38:1c:dd:b0:6c:e4:e9:aa:44:f1:68:01:26:
                    51:4d:fc:b6:09:f1:34:52:82:78:b2:fa:f1:61:06:
                    2d:34:ca:a7:47:1a:c4:94:8c:f2:4b:f2:e3:4a:52:
                    9d:f9:2e:fb:a8:86:8d:72:1a:ef:1e:de:0f:d6:e8:
                    0a:2a:5b:05:e9:de:16:40:ca:48:98:c2:2e:d2:e8:
                    61:f2:4c:a5:bf:a0:b5:e9:c3:65:0c:7a:6c:cc:e0:
                    59:f9:65:41:1c:70:92:1e:30:20:30:b1:66:47:55:
                    12:b4:fc:fd:bf:fd:36:20:ab:37:0c:45:a2:52:57:
                    56:9e:0a:49:e0:27:d5:d2:88:be:76:12:93:a7:6f:
                    35:72:4f:77:75:c6:f8:ba:20:cc:3d:2b:a8:c5:48:
                    9b:59:7a:d7:05:d7:23:0a:f0:3b:06:1b:c0:8b:5f:
                    c4:7a:ef:59:5a:17:b4:90:a9:3b:94:e9:b6:c1:2b:
                    f5:31:a7:83:07:d9:f6:f8:6b:0a:8e:a1:12:19:85:
                    6f:ae:51:05:51:e5:30:33:9f:6b:3e:15:a6:20:51:
                    f4:23:b9:bf:81:0e:69:a3:02:43:d4:77:0f:fb:9e:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:04:24:94:3F:A9:EC:A8:2A:C5:52:B3:3B:35:9A:0B:44:88:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b94d3a8-4047-3be8-8b54-5471fb04b6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:24:5b:91:63:d0:36:50:9d:53:f4:cf:72:ea:f5:c9:01:
         d7:a2:f0:a1:06:45:de:23:d1:5e:58:01:9e:70:52:49:65:fd:
         95:43:52:b8:22:cc:e9:17:4d:e7:94:c6:49:f8:5f:54:38:f4:
         db:8c:2c:d6:a7:40:0f:dd:5a:00:f7:de:12:10:a1:6e:a1:ca:
         47:2c:3c:45:c3:83:29:b6:08:6b:48:4a:95:67:46:31:8e:00:
         5f:9f:a2:26:34:4b:73:37:b7:d2:6a:58:1c:7b:47:c3:7f:30:
         40:f1:e8:d2:65:bd:4f:ac:72:df:d9:71:ca:c4:67:93:d0:01:
         8c:de:f6:0c:c1:6d:e7:4f:a3:ea:5c:0f:02:a8:83:b1:e8:4a:
         22:77:c7:7e:2c:7a:e8:52:6f:7a:4b:03:34:31:53:2d:24:e4:
         09:7f:1b:33:15:42:62:e0:a4:89:f6:d4:0b:bc:e2:e3:47:79:
         57:41:fd:cc:27:c2:99:d1:d2:18:ad:77:78:73:9c:d5:24:32:
         07:da:f3:04:da:3d:52:f8:03:d8:a5:ce:58:a9:e1:dd:95:d6:
         7f:d0:80:7d:ab:c8:60:50:29:de:31:02:92:3d:53:83:44:b5:
         1e:be:7e:8b:89:87:f5:1d:17:8a:7b:86:ba:6b:d7:31:16:fe:
         44:08:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:43 2026 by rpki-client