Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df3c3e8-3219-3ab2-a4c6-9e9a501ba130.roa
File:                     4df3c3e8-3219-3ab2-a4c6-9e9a501ba130.roa (raw, json)
Hash identifier:          U7XhdjLu267KVQf1U3jB0JdebSzgduiucrXvui+RUFw=
Subject key identifier:   0B:20:DF:CC:FD:06:59:32:B8:0D:BF:EB:E4:33:77:F0:8A:BB:A0:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F8E888B647DD0D927C2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df3c3e8-3219-3ab2-a4c6-9e9a501ba130.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     396571
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8e:88:8b:64:7d:d0:d9:27:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=640ded1b-2213-4e52-9e5e-019caf53990c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:a0:32:8c:67:4f:12:16:22:f9:60:45:52:
                    7c:20:9e:73:9a:dd:38:6e:a5:6e:f5:00:96:6e:b7:
                    c5:69:c4:92:12:ab:49:0c:ef:1b:e9:4d:e9:69:fd:
                    ee:0d:8a:78:9e:44:77:91:ca:f1:ce:65:f2:31:21:
                    0f:24:c4:53:17:32:05:06:91:ad:e3:11:81:e6:42:
                    e6:9c:5e:4f:4a:f9:f7:d9:03:70:b8:4a:42:e0:b5:
                    f4:a5:9d:6c:ad:56:df:31:c8:02:7d:a1:4a:b0:c5:
                    26:24:8d:fb:17:93:92:2d:5b:2b:35:91:84:91:3d:
                    37:d5:e6:92:70:4a:15:fd:1c:b8:f3:e4:66:ce:c1:
                    e6:a5:1a:21:84:b9:2a:49:aa:7a:10:b6:d1:29:6e:
                    66:ef:17:d5:0a:30:77:2f:cc:96:c2:3b:b0:f9:bc:
                    db:a6:e7:60:62:e2:a7:6a:cc:ae:07:f3:51:aa:6e:
                    65:fe:eb:33:06:1c:a0:2a:fa:0f:f6:2b:0f:bc:48:
                    d1:e7:e9:85:3c:85:9e:b7:e2:b6:60:a5:98:68:93:
                    0b:b7:99:2c:d8:84:80:e0:c1:6b:d1:12:97:17:ef:
                    ab:06:cb:15:9d:14:b8:cc:b9:ab:d2:48:c5:19:83:
                    b2:1f:df:f0:95:c7:83:b9:0f:63:d1:b5:9f:ef:23:
                    a8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:DF:CC:FD:06:59:32:B8:0D:BF:EB:E4:33:77:F0:8A:BB:A0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df3c3e8-3219-3ab2-a4c6-9e9a501ba130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a9:98:59:d1:cd:54:cd:b8:ea:93:c7:60:6d:10:fd:e6:43:
         2f:13:18:20:59:7a:63:de:d7:f4:a7:d8:cc:ad:0f:20:a6:95:
         1d:d1:8c:d8:f1:db:21:cf:1d:43:b5:5a:fd:14:10:87:56:b4:
         8c:74:c5:f7:2b:75:ae:31:2c:eb:fa:ad:1d:66:dd:9f:9f:51:
         2a:fe:7a:b8:62:d9:79:6f:6d:fe:0f:ad:b9:74:c3:b5:1b:1e:
         59:ee:a7:de:8b:c2:a3:16:99:e7:46:a5:7e:b0:1e:dc:8b:b4:
         c8:90:bb:a9:c1:2c:42:70:d4:ef:aa:91:c7:7a:d5:a3:fa:a9:
         31:8d:6c:82:12:b4:dd:92:c2:d6:6a:69:b0:af:64:b3:38:88:
         50:0b:9d:f3:71:dc:1a:23:13:91:48:05:6a:05:ae:b9:e4:e1:
         f8:ea:09:cd:84:e5:a1:d9:aa:ef:c8:95:f8:fe:6f:ac:80:e7:
         0e:fb:99:a6:df:9f:4a:21:63:f4:fe:22:68:1c:e7:08:5a:aa:
         16:8c:8c:a7:4b:18:61:e7:49:0d:45:f1:b7:63:a6:f5:6f:73:
         0b:a7:2a:82:c8:e5:2d:54:ca:cc:13:7e:a8:18:6b:f6:6c:9a:
         30:94:44:2f:4b:eb:03:86:4f:6b:2a:af:92:58:e0:4e:40:de:
         36:ee:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:24 2026 by rpki-client