Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5860904f-793f-32b0-bd2a-3015d75676bc.roa
File:                     5860904f-793f-32b0-bd2a-3015d75676bc.roa (raw, json)
Hash identifier:          wFAPkOydox5GScwbtpkr4Ndg0dLmm8akT7QqGYuVkPA=
Subject key identifier:   4E:B4:44:0B:44:D0:12:EC:BB:F9:09:8E:EB:EF:89:C6:FE:9A:E9:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A04AF6C9AFC0FDB51700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5860904f-793f-32b0-bd2a-3015d75676bc.roa
Signing time:             Tue 10 Mar 2026 14:28:38 +0000
ROA not before:           Tue 10 Mar 2026 14:28:38 +0000
ROA not after:            Mon 08 Jun 2026 14:28:38 +0000
asID:                     396560
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a0:4a:f6:c9:af:c0:fd:b5:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:38 2026 GMT
            Not After : Jun  8 14:28:38 2026 GMT
        Subject: CN=87542ecf-9e67-487f-b3b3-f4f591c6d265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:b8:70:9b:85:6b:7c:64:a5:a1:33:5b:c5:
                    59:4a:b1:37:08:5b:8a:77:75:04:c7:1a:ef:65:df:
                    fd:05:33:bb:26:2b:96:c4:31:d8:01:25:04:be:77:
                    1b:6b:52:80:45:aa:b4:f2:ef:80:93:52:ff:a1:32:
                    9b:5d:b1:09:77:35:2f:25:2d:3c:6e:53:77:b0:ea:
                    eb:6d:88:87:a4:74:e8:9e:48:6a:8e:12:4b:b6:08:
                    0e:bd:fe:26:54:fa:29:f7:d0:21:30:ce:4e:ac:6a:
                    ce:7a:02:82:11:70:a3:5c:e6:b7:94:1c:24:97:4f:
                    34:bf:4e:9a:ee:9e:8c:0c:37:64:ce:03:f3:b3:13:
                    64:e7:82:8e:3e:c2:96:37:cd:cb:5b:ff:5d:a8:17:
                    44:e4:4d:e6:5e:e2:aa:0b:2f:da:b3:dd:ea:22:89:
                    58:e5:90:04:4c:46:7d:35:15:57:45:e6:4b:bd:e7:
                    af:fb:e5:3e:b3:3b:51:a6:4e:f5:83:18:fd:78:12:
                    7f:d9:e7:e4:0e:47:fb:8f:0f:a5:71:29:67:e8:fe:
                    c5:ae:27:61:e5:23:bd:9e:7e:e3:13:9f:87:d8:40:
                    0c:a6:86:9d:cb:85:c4:96:4d:48:52:e9:cf:d3:6c:
                    d6:06:2d:37:99:ad:b1:a4:9e:df:39:66:4f:ea:f1:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B4:44:0B:44:D0:12:EC:BB:F9:09:8E:EB:EF:89:C6:FE:9A:E9:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5860904f-793f-32b0-bd2a-3015d75676bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:73:8b:56:4b:89:94:69:8c:bf:a6:12:a2:b1:f3:9c:13:
         53:fa:f9:24:2f:34:e4:73:2f:d7:92:c4:02:57:19:7a:6b:f7:
         93:e6:74:b9:d3:ea:bd:42:78:f0:c8:fa:b6:ac:c0:fb:1d:4f:
         76:27:6f:99:6b:9d:9d:07:44:a9:83:e1:6c:62:71:2b:71:bc:
         eb:59:93:bf:42:81:f9:b2:0f:9b:c9:fc:0a:29:42:52:03:fa:
         74:02:01:90:c7:c1:fa:8b:68:d2:a2:ae:34:34:7a:44:5c:34:
         e9:37:54:7d:58:cc:90:61:7c:62:a8:38:25:52:03:8b:68:83:
         34:d1:66:3a:b7:2a:fa:7f:fa:bc:e3:10:e9:1e:c6:34:8b:6a:
         ad:14:94:92:d9:64:70:80:13:db:ad:4a:33:4f:ea:19:83:d8:
         11:fb:92:b0:f5:dd:be:2e:3d:b8:61:6e:84:79:f7:b5:ac:12:
         f7:e1:f5:d6:eb:8d:72:61:82:a1:f6:7e:05:16:29:a9:f9:1a:
         9c:41:30:cf:f3:93:65:27:87:59:d1:b8:2a:d0:0e:37:07:05:
         55:17:e2:6b:28:7a:f8:63:85:7a:6b:44:c5:89:4a:1c:54:90:
         8c:0f:5c:19:bd:c8:ab:3c:1e:66:b2:7b:0e:bb:c3:fa:98:9b:
         87:61:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:31 2026 by rpki-client