Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/671bd22c-5ee2-337d-8872-c7db326b141f.roa
File:                     671bd22c-5ee2-337d-8872-c7db326b141f.roa (raw, json)
Hash identifier:          Tn3ARH4XH5ByPDwa4GAvbqXGat2T1oXXUZNi9Bx/B4o=
Subject key identifier:   91:DD:B5:9B:1F:75:77:69:CB:E3:94:46:99:A7:BE:98:C8:8B:1A:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644CF1DB47C63D164DD8EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/671bd22c-5ee2-337d-8872-c7db326b141f.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396563
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:cf:1d:b4:7c:63:d1:64:dd:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=d1bdd2c7-a6f2-4b83-906e-7da554b51755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:38:32:25:d8:d5:28:81:30:2a:21:24:f0:
                    c6:0c:9a:b7:e5:11:2d:fc:8b:5a:78:75:06:8c:7e:
                    8c:c7:83:ac:e6:15:a1:c4:c8:92:af:4c:27:7e:5f:
                    2f:a4:f4:c7:84:ad:44:c4:25:18:46:00:26:13:05:
                    10:c3:80:b0:08:cf:89:39:37:26:36:7e:a7:32:f4:
                    a4:d1:c5:f3:79:e9:65:69:18:f2:fb:db:5b:54:78:
                    96:b0:5e:10:c7:b9:dc:81:cf:7c:e6:93:df:68:c5:
                    bf:74:0e:da:2b:c1:4c:d3:d3:ac:09:92:09:3e:c6:
                    ba:50:f4:38:fa:19:65:c8:21:be:b0:52:82:db:28:
                    5d:51:de:50:30:ad:1b:c9:72:b5:a1:99:52:41:38:
                    82:d8:41:99:68:72:e6:16:41:a2:eb:d5:69:2a:15:
                    8b:16:2c:63:df:fc:a5:46:35:40:64:2a:c9:62:05:
                    2d:d8:b8:4c:be:47:7d:f4:12:de:ce:c5:cf:19:76:
                    10:c4:5c:ca:4a:86:ca:33:a2:f5:fc:00:c3:3a:a8:
                    dc:3a:c9:1a:20:f3:32:f5:ec:e6:c4:2b:ea:18:a7:
                    c5:52:47:bf:8d:99:2a:d7:03:89:fc:b8:f9:83:ae:
                    7d:76:ad:04:b2:b6:fe:be:79:ff:23:c8:16:e8:cf:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DD:B5:9B:1F:75:77:69:CB:E3:94:46:99:A7:BE:98:C8:8B:1A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/671bd22c-5ee2-337d-8872-c7db326b141f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:13:2f:22:42:18:ac:72:f9:e2:90:46:38:60:34:f1:0b:97:
         9c:85:67:39:a3:dc:1a:c0:b2:b0:5b:d3:aa:7c:44:48:8c:92:
         7f:e8:7d:5d:ae:04:38:a7:18:c2:b3:fa:76:5e:3b:62:77:f9:
         7e:c0:b2:06:e2:8c:ee:49:8a:a9:39:7b:25:60:98:5b:85:a3:
         4a:3a:2a:80:3a:0c:4e:52:f5:4e:90:a3:4d:59:d6:ed:07:a8:
         91:04:c5:79:d4:c3:54:1a:bf:ee:aa:3e:18:6d:89:13:8c:8e:
         ae:2c:e7:52:df:54:eb:55:fb:cd:72:48:61:99:0a:d6:3a:9e:
         10:47:9b:8c:f6:7b:cf:ea:e0:93:2d:f4:16:69:e8:9e:9c:99:
         b4:8e:b6:9f:16:38:dd:de:61:20:64:7b:6d:df:19:86:43:e1:
         2e:83:7f:f7:36:f8:4c:8f:49:c4:db:c1:5a:88:1a:03:2d:07:
         58:26:5d:f5:0b:68:50:4c:39:69:dd:d6:fd:da:b5:8f:df:e0:
         69:2a:24:26:fe:72:cf:c5:8f:41:f2:df:3d:f5:d8:0e:98:80:
         16:ec:45:d2:07:88:67:4a:77:58:91:df:06:c3:96:ab:99:95:
         cf:d9:95:e4:f5:0a:a6:62:12:04:fd:bb:26:11:91:92:68:c8:
         f4:27:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:45 2026 by rpki-client