Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d54494b-20b3-335d-b7d2-bdb51e94dc3a.roa
File:                     5d54494b-20b3-335d-b7d2-bdb51e94dc3a.roa (raw, json)
Hash identifier:          nnCq2mo35my7derlUzywbr90PG/103AjyAQAYF27WGo=
Subject key identifier:   88:4D:95:D4:8F:A0:1D:CA:3C:19:12:FA:B8:E4:67:DB:1B:33:45:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644D3BC067CA3911F9BC7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d54494b-20b3-335d-b7d2-bdb51e94dc3a.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396827
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:d3:bc:06:7c:a3:91:1f:9b:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=ce971a99-1e95-4698-9272-94164fb107f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:27:90:53:59:5a:9f:c2:4d:86:ad:65:6a:89:
                    4e:b6:78:5f:e7:4b:e9:15:fe:f3:93:0c:f8:f3:83:
                    0b:6c:28:0a:4c:96:7a:a5:c7:10:52:28:66:87:36:
                    b8:ef:34:5b:6c:e9:f8:88:de:ca:a2:98:79:d4:4a:
                    7a:c3:6f:9c:10:4f:47:d2:0d:37:c8:14:18:ab:aa:
                    a9:ea:ea:e9:82:03:90:ad:0f:f8:50:d2:79:94:5a:
                    59:a0:18:38:a2:30:80:26:c8:8a:6d:29:03:cc:89:
                    f0:9d:33:1b:70:ec:3b:d0:bb:1d:5c:94:9b:16:01:
                    ac:d6:d8:03:1d:12:df:49:0a:92:d2:8b:93:52:76:
                    5f:56:19:52:10:6c:76:b3:48:f1:88:8f:cf:f8:a3:
                    6e:89:fe:32:01:1d:09:e6:4b:e5:af:74:3c:de:56:
                    38:59:b3:5b:83:3b:72:9d:15:3c:65:40:30:b8:9d:
                    12:eb:3c:fc:c4:16:50:f1:8c:df:de:42:43:27:72:
                    b0:19:db:c6:42:c0:65:51:75:44:6c:c9:06:0e:3b:
                    57:06:8a:8f:5e:60:ce:ce:83:dd:10:b2:59:34:3d:
                    b8:da:1f:12:b1:f6:04:c5:bc:cd:08:2d:bb:69:f7:
                    f0:60:53:80:cc:d2:87:b8:20:2c:43:3f:3d:60:a0:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:95:D4:8F:A0:1D:CA:3C:19:12:FA:B8:E4:67:DB:1B:33:45:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d54494b-20b3-335d-b7d2-bdb51e94dc3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e4:aa:96:98:ac:cd:32:79:0c:44:70:15:96:41:01:e6:56:
         68:fa:b7:eb:41:ab:fd:a8:0c:97:73:22:10:b8:e9:3c:38:67:
         4f:7a:38:86:cc:fe:e9:db:56:d9:38:98:ca:0e:e6:79:81:e8:
         20:5c:1e:16:48:b1:af:91:cc:dc:84:2c:ad:92:e8:e0:9b:73:
         ae:86:fd:0f:23:8c:c4:8f:8d:29:30:0f:c9:b4:0e:e0:53:72:
         32:35:ab:cc:ef:85:89:71:12:1c:5d:c6:15:76:dc:76:a1:e9:
         9f:9c:86:4e:31:c2:97:52:08:cc:15:c7:43:58:bb:8d:cf:35:
         7a:1e:69:38:99:db:81:9a:5f:bf:0b:04:fd:4d:6c:c4:35:dd:
         1f:2a:62:7a:9a:91:5b:f4:48:8a:f7:02:22:f3:70:e4:dc:04:
         f6:b4:50:e8:d0:33:db:2b:df:14:18:f5:a8:83:f7:8c:bb:c8:
         31:2d:02:9c:10:4e:47:16:97:a0:bd:da:4c:75:0e:18:58:41:
         43:35:a9:fd:0f:af:ff:96:ac:79:42:d8:ab:f7:62:8b:64:2e:
         74:e9:88:2b:b5:1d:25:fa:f0:0d:39:b9:3c:f6:fd:d4:4a:0c:
         94:7c:4a:73:c4:c4:2f:21:4a:79:c1:4f:ce:e0:fc:da:e3:65:
         24:46:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:36 2026 by rpki-client