Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c6e165-b129-378a-94ad-862abc4b643a.roa
File:                     55c6e165-b129-378a-94ad-862abc4b643a.roa (raw, json)
Hash identifier:          rD6OSwfhe5mRwkb/3zHGNWF3VpzUSnuc7vHVuIUnFnY=
Subject key identifier:   F4:8D:78:C6:A3:83:75:13:86:46:99:69:1F:F2:E5:85:8D:B7:53:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A607BBD6B1FE11CE24700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c6e165-b129-378a-94ad-862abc4b643a.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396562
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:60:7b:bd:6b:1f:e1:1c:e2:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=3b89dca2-3340-40a6-9b03-211367e17e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:58:5a:eb:96:34:06:13:c3:be:1e:a3:f3:
                    49:17:f1:21:8b:8e:58:28:bb:dc:37:83:28:54:ce:
                    31:d4:e7:25:aa:29:d0:0d:33:26:7b:93:6c:a9:3e:
                    4c:f3:c2:7d:eb:99:d0:e0:cb:a0:c6:a8:19:c4:d5:
                    3e:ce:e9:02:43:3b:fa:99:a7:b5:b1:68:00:41:63:
                    53:5d:da:cc:4b:b5:d3:b9:1c:7b:f4:12:0d:5f:fd:
                    24:dc:e4:b1:2e:dd:ea:88:cf:57:25:3a:3e:a9:4b:
                    dc:95:fc:53:fb:08:e7:88:01:23:32:0f:94:67:05:
                    5e:76:51:dd:ba:78:3c:e4:7d:ee:ea:3a:3b:fa:34:
                    81:1a:1f:0c:8e:82:74:df:8b:c0:06:68:08:93:4d:
                    0e:3e:d5:86:6f:f2:55:42:3d:fc:9c:6d:fd:b6:ff:
                    a5:13:e2:b6:13:4d:de:2c:d1:f4:24:39:de:29:35:
                    52:f1:6d:fd:a3:b9:19:60:b1:e7:8a:7f:d9:f3:27:
                    eb:4d:45:43:f4:af:ba:4e:64:0e:7d:d2:ba:93:87:
                    1f:f6:3d:7f:75:14:13:6a:75:db:e1:74:85:b0:45:
                    e7:e3:b8:4f:39:2c:72:0b:c3:12:eb:65:8b:c1:92:
                    85:a6:f2:71:09:56:9b:9c:f8:4e:c7:4b:35:50:82:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8D:78:C6:A3:83:75:13:86:46:99:69:1F:F2:E5:85:8D:B7:53:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c6e165-b129-378a-94ad-862abc4b643a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3c:97:06:ea:72:47:b8:fc:10:cb:44:ef:98:f2:fc:4b:c2:
         0f:5f:88:c0:5e:ca:dd:ed:1b:d1:77:ec:0b:23:2f:23:d5:e0:
         df:98:90:7f:d5:0e:12:4f:5f:9f:3d:10:1e:0a:ad:78:80:8c:
         da:55:86:6e:a9:cc:1e:11:c2:08:ff:40:16:b9:9b:89:ec:5e:
         8c:1a:00:d0:1e:aa:53:c2:93:1f:5f:3a:8a:9a:87:84:4c:dc:
         c9:b9:31:63:3c:6f:82:65:da:19:f8:57:a8:a2:8b:74:a8:84:
         2e:32:0f:80:69:d4:33:be:00:15:e4:00:0b:a5:3e:04:cb:8b:
         25:2a:a7:f7:b2:ac:78:3c:4c:3a:11:55:cf:d4:57:87:d0:42:
         16:2f:6f:a1:aa:8b:2e:d4:2c:5a:a4:9f:9b:f3:74:bd:8a:0d:
         67:ce:4a:d2:98:62:51:ee:cb:e8:c2:c1:6e:85:37:e4:2c:17:
         d0:95:b0:15:c4:f9:6a:40:8a:a3:ce:c5:66:29:4d:89:f6:9a:
         75:aa:83:db:0b:58:6b:32:e3:96:88:17:a3:32:70:e1:fe:b0:
         9f:28:4e:c9:b4:01:5c:9a:6e:3d:0a:4e:8b:c3:23:7b:66:96:
         e0:84:b2:66:20:a0:ed:c0:f2:59:27:0e:f9:81:96:f6:8e:cd:
         8f:36:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:15 2026 by rpki-client