Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dbf208e-b092-373e-9a24-ae54f963575f.roa
File:                     5dbf208e-b092-373e-9a24-ae54f963575f.roa (raw, json)
Hash identifier:          o42ldYjnY0wWzV/rIxJJgK2A/M9bTVoluhu1HP/6C6M=
Subject key identifier:   43:65:4E:66:87:1C:D8:C1:43:FA:71:AB:5D:15:5A:14:90:ED:5D:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644D20F3E063120B9E78200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dbf208e-b092-373e-9a24-ae54f963575f.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396605
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:d2:0f:3e:06:31:20:b9:e7:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=89c2d92e-80e8-459c-97f3-4c8c273e8d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:35:07:d9:be:ac:01:f0:88:5a:64:3b:d5:
                    75:fc:19:ce:62:48:87:2e:de:d3:f8:8d:d4:28:e5:
                    3c:98:90:6d:73:d9:27:86:4b:0d:67:1a:9d:1d:e8:
                    ff:17:dd:fd:06:60:87:24:d0:1e:f8:5c:0e:8a:5a:
                    17:ce:f7:94:15:e9:1d:12:15:21:56:b9:ef:09:20:
                    f6:c8:3a:a3:ac:15:eb:f6:6f:1d:ba:fa:c9:9d:c2:
                    b1:2f:f3:f5:32:f5:39:a2:6d:6a:6e:34:73:4c:b7:
                    0a:45:43:6a:a0:9b:1c:7b:00:52:dc:1e:57:92:e1:
                    09:23:80:7b:d8:04:de:ba:ba:e1:a0:78:18:c9:40:
                    8e:60:17:e6:87:04:62:ee:6f:0f:39:14:95:d4:a6:
                    34:aa:48:06:bb:bb:8b:d2:a3:a0:2f:cc:8d:35:8f:
                    17:99:13:fe:4d:e0:a1:fa:cb:29:82:54:4b:fe:72:
                    e3:27:71:7d:eb:31:de:a2:f0:07:40:c5:5f:10:82:
                    d0:16:40:95:f2:a8:d1:6a:f0:3a:ee:8a:80:2e:1c:
                    1a:db:bf:68:1f:a6:f6:b6:d9:2d:7a:6f:e7:54:8d:
                    fe:03:da:29:05:ef:f9:cb:2e:8a:85:e3:5c:d2:c6:
                    b8:9e:e8:4b:80:cc:d4:9c:58:6a:7d:e4:88:6c:c5:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:65:4E:66:87:1C:D8:C1:43:FA:71:AB:5D:15:5A:14:90:ED:5D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dbf208e-b092-373e-9a24-ae54f963575f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:54:3a:1c:6f:56:ea:9e:f7:26:bb:0b:b3:62:de:c4:02:83:
         ff:b0:44:af:18:1e:60:5d:b5:5f:5a:af:4b:06:ba:60:fe:21:
         e8:26:2a:a4:cf:f3:29:e6:4e:11:2e:c0:2d:26:76:0c:c2:8f:
         d1:b3:21:f5:d8:01:6c:12:74:b1:80:2c:86:39:d3:66:4a:a1:
         0f:11:e3:eb:32:75:e5:33:6f:5e:71:1b:9e:a6:2f:ca:a7:b9:
         b2:c7:6c:47:ff:74:0d:48:c2:c8:56:11:79:30:4a:f2:97:7e:
         17:7a:59:1b:f7:1d:2e:34:99:5e:9f:ee:9e:9d:86:63:e4:e0:
         0e:35:d7:29:34:6a:b9:93:99:15:69:23:cd:a0:48:9e:60:79:
         4d:70:ad:57:3f:03:38:98:77:3c:18:f6:f1:89:df:26:0d:a3:
         43:c2:f8:bc:89:73:03:3a:7c:7f:af:07:ac:e0:f2:bc:54:3b:
         a9:8d:10:34:7f:c8:74:e6:0d:dc:9c:07:02:62:e4:eb:35:14:
         da:c3:b8:49:6c:75:ef:94:e6:69:37:9b:de:17:dd:f0:3a:02:
         b9:32:6c:88:ca:c0:ea:fc:6b:80:89:e7:84:e5:ed:eb:65:4a:
         7d:cc:98:85:1c:ea:b8:3e:b3:10:32:75:ca:be:75:59:44:bf:
         be:f1:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:24 2026 by rpki-client