Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6244cb39-97ed-3281-a0da-a1eb24200cb7.roa
File:                     6244cb39-97ed-3281-a0da-a1eb24200cb7.roa (raw, json)
Hash identifier:          2efMCaLCWdF+NpBT02caJ/Rr6juDgjbEH2MTYIM1/ZM=
Subject key identifier:   B7:13:ED:C3:54:C1:3E:4A:1D:04:22:BE:32:6A:42:82:09:50:F5:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0BDD189928F5A4B59A36B8CE
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6244cb39-97ed-3281-a0da-a1eb24200cb7.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     396552
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:18:99:28:f5:a4:b5:9a:36:b8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=7e2b37fb-4406-4595-964a-030b9ccfd6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:c6:48:68:33:da:98:3b:c4:a9:fd:22:cb:
                    34:8a:be:ba:ac:ff:79:9e:72:49:68:bd:58:a5:f7:
                    1d:e4:a5:89:83:a6:3f:bc:e0:10:56:75:5d:db:86:
                    57:be:c1:d7:11:a3:3f:42:dc:c5:89:d1:05:6a:68:
                    d5:d7:63:8e:d5:46:b1:a1:c0:1e:0c:a7:71:76:10:
                    86:0e:82:c8:63:78:e3:13:37:25:fa:cf:57:81:e3:
                    24:33:85:a9:05:67:f4:d8:a8:0e:d8:6d:27:25:d9:
                    0a:f0:e3:99:7b:f8:67:53:7a:13:08:1a:69:a8:21:
                    d0:d4:d3:76:78:53:e5:ce:e8:32:69:2c:f9:d2:e3:
                    35:ba:6b:88:fb:aa:2e:08:7c:4a:f3:8f:1c:91:18:
                    27:04:29:24:10:f3:57:cb:7b:3a:29:a1:df:25:74:
                    88:91:1d:88:8f:4c:26:fc:a5:eb:ba:d8:e7:30:6d:
                    5a:d1:69:b4:8b:0f:ca:3e:29:c0:1d:b5:87:8f:29:
                    c9:c7:6d:ad:49:bd:e8:ed:ad:81:a2:23:16:8d:1b:
                    73:30:de:28:1a:c8:c9:a5:aa:b4:38:d7:c5:51:ce:
                    14:00:6b:08:cf:36:0e:68:59:b2:47:70:02:91:43:
                    31:80:28:9d:96:72:df:bc:9b:42:48:26:7e:8a:c6:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:ED:C3:54:C1:3E:4A:1D:04:22:BE:32:6A:42:82:09:50:F5:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6244cb39-97ed-3281-a0da-a1eb24200cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:75:03:c7:61:c2:e4:31:fc:a7:b2:60:ec:37:21:47:03:03:
         29:d5:6f:a8:b3:5c:5d:80:43:b5:48:94:2c:19:bb:a0:bb:f8:
         82:07:d8:bf:f5:b9:9f:c2:d1:3c:8a:17:9d:d7:de:2e:6e:9d:
         6a:25:70:4d:51:f2:c0:f2:9e:c9:a1:f5:97:44:db:13:5a:79:
         36:a7:b9:4d:01:bc:e5:52:7d:4d:18:13:f0:9d:f0:5c:86:3f:
         93:17:0c:75:92:5b:f8:56:df:e8:3c:10:88:f2:6f:c0:2b:c0:
         56:b4:94:a3:67:74:f3:21:1a:07:04:ee:8f:d5:6f:db:49:95:
         69:e0:2d:3d:0b:83:08:07:b9:80:e7:56:1d:b6:d8:ba:3c:ed:
         1f:5b:ec:59:72:03:d5:16:36:aa:9c:40:8a:8d:ec:b1:1e:e3:
         0f:1d:cf:99:53:bc:9c:35:44:f1:9f:2a:ff:af:31:a2:ea:b0:
         3c:41:49:dd:9a:2f:6b:24:ca:b5:41:93:a5:18:57:72:7f:76:
         b2:ff:27:47:ae:f4:a8:e9:e1:50:71:85:27:0c:80:5d:71:37:
         cf:69:86:b0:1f:c7:a7:bc:b0:b5:b6:a9:77:aa:74:4c:4b:e4:
         3b:46:fe:37:ff:90:2b:1d:c4:61:07:f2:dd:8b:fa:c0:3e:5a:
         7c:48:ed:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:49 2026 by rpki-client