Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62212970-2469-3a81-8eef-70f91a2c427c.roa
File:                     62212970-2469-3a81-8eef-70f91a2c427c.roa (raw, json)
Hash identifier:          u/zKk5UCqYimrLx4dQpEc2murGXaKhW+B8zuiFvFm0E=
Subject key identifier:   2A:4D:7A:82:41:B2:C9:72:8E:FF:DE:83:45:5F:9D:5A:18:71:E7:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A681681C0CD8AE1CBAC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62212970-2469-3a81-8eef-70f91a2c427c.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     211369
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:68:16:81:c0:cd:8a:e1:cb:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=9302c420-b690-4958-b379-079be9a0309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7e:db:fd:1d:6d:75:8a:cc:05:ad:c7:4f:e6:
                    f8:14:7e:e6:24:d7:97:33:3c:eb:79:1b:90:c7:e6:
                    1c:76:cd:8e:e5:34:ee:b1:67:3c:3c:eb:c6:60:c8:
                    7b:42:ff:3f:ee:1e:fb:bd:68:f4:e1:ef:a3:94:a1:
                    78:4a:b0:85:7f:2f:bd:01:80:f1:90:06:00:a9:fc:
                    69:22:3e:81:d5:b4:28:58:b2:ff:1c:26:7b:ca:93:
                    aa:44:1d:ee:6b:65:c1:6e:2c:d2:f6:62:c7:f2:50:
                    b0:d3:b5:9b:f5:a1:de:fb:99:1b:64:ef:8c:95:c4:
                    b1:c2:a3:26:f9:28:ed:dc:40:e8:d1:52:1d:70:2a:
                    b0:f3:c7:16:d5:56:7c:ac:58:b6:98:d3:af:70:08:
                    65:8b:04:87:20:4c:78:85:37:da:a3:35:54:26:8b:
                    1f:14:e1:0a:a1:f0:7e:97:12:d1:5f:bc:9f:8e:a3:
                    e7:e5:ba:c7:63:9b:1d:17:4b:2d:a8:d2:22:62:e9:
                    59:b1:65:3e:93:e1:de:46:e3:bd:7c:be:6a:b9:46:
                    79:be:7f:8d:65:17:7a:f0:b8:37:b2:14:14:72:a0:
                    c4:a3:b3:05:0d:0b:9d:50:b1:d1:df:76:ed:98:47:
                    13:4f:60:e6:8a:e1:f9:30:68:07:bb:b4:21:4e:33:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:7A:82:41:B2:C9:72:8E:FF:DE:83:45:5F:9D:5A:18:71:E7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62212970-2469-3a81-8eef-70f91a2c427c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:2c:f0:57:44:78:9c:98:d9:11:89:81:8f:14:f5:fa:48:
         7c:45:91:b0:5c:14:00:6d:1b:4c:6d:ae:27:0d:61:e6:aa:e6:
         47:ea:84:e6:cd:ce:bc:50:24:8b:ca:40:cc:45:d4:79:02:14:
         a7:7c:2c:33:ad:be:27:bd:89:ad:63:8c:2c:33:fe:e7:89:d1:
         30:13:d9:a7:8c:fd:87:59:2d:da:71:6a:b8:6a:3c:2c:8a:a9:
         33:0f:39:7f:62:d7:cd:92:9f:1a:f6:9d:c1:78:98:e8:61:9f:
         b7:20:40:20:7a:d4:58:d1:59:1d:29:13:77:68:97:be:93:01:
         6d:77:93:52:2a:7c:86:b6:51:ad:0f:7e:d0:b0:e6:6d:2a:2e:
         73:3a:b7:6f:4f:a0:d6:e5:c8:cf:bb:e8:e7:b2:49:a0:ac:72:
         71:16:9b:27:d6:84:5a:0a:11:e2:20:09:31:69:36:c8:87:6f:
         89:d3:32:12:35:ab:50:f8:ca:9c:1f:89:0b:de:71:f8:9e:b0:
         8d:1d:a5:75:21:66:5a:02:5b:1f:85:50:7e:87:62:5f:f8:26:
         57:ec:60:c7:c6:89:c0:36:f6:69:8d:ab:49:17:78:06:f8:59:
         06:21:eb:29:57:f1:0a:9f:28:b1:34:1d:5b:4a:e9:67:7c:35:
         33:2f:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:30 2026 by rpki-client