Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ae61ff2-6024-386d-9c3d-57add2930b07.roa
File:                     7ae61ff2-6024-386d-9c3d-57add2930b07.roa (raw, json)
Hash identifier:          8sNEg4wba3b4sPDSkx1fqhPuHI5clRuaXHR2AHaxwZ0=
Subject key identifier:   53:06:24:BC:D7:88:8A:C9:79:F7:C6:47:F6:BC:92:12:BC:C2:8D:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A74C3FCB9460BA4D2D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ae61ff2-6024-386d-9c3d-57add2930b07.roa
Signing time:             Tue 10 Mar 2026 14:28:41 +0000
ROA not before:           Tue 10 Mar 2026 14:28:41 +0000
ROA not after:            Mon 08 Jun 2026 14:28:41 +0000
asID:                     396572
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a7:4c:3f:cb:94:60:ba:4d:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:41 2026 GMT
            Not After : Jun  8 14:28:41 2026 GMT
        Subject: CN=4ce9d7b0-e8ed-4095-81e7-7fa35433a1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:45:8c:3b:dc:7e:f6:bb:1f:13:3b:b0:a7:
                    dc:ec:fe:5c:1a:7f:f2:a1:8b:f0:fa:c8:c6:a5:be:
                    3b:07:9b:19:9b:9e:80:c2:c8:d2:54:c8:7a:71:f8:
                    a4:27:49:20:e9:19:d6:7b:af:41:10:22:64:58:93:
                    27:02:c1:6a:95:77:cb:d6:3a:18:bc:39:7e:17:ab:
                    82:95:2d:ef:08:35:0e:55:02:b9:9e:85:68:02:69:
                    e9:04:c7:4e:37:d1:5e:3d:5b:00:5c:7b:a1:dc:53:
                    3e:ce:9c:39:79:9b:be:00:b8:32:f3:36:1c:74:38:
                    86:c1:86:ac:9c:97:c3:59:e3:40:54:dc:ad:d1:38:
                    5a:b2:e4:67:45:53:80:52:1d:d8:98:46:94:eb:cb:
                    70:5a:15:2c:86:b6:40:2c:7b:94:b3:ea:e8:0d:83:
                    ae:10:bb:67:f6:b6:bb:b6:02:ff:cb:07:04:0b:7f:
                    34:ed:e9:e7:31:c4:3e:f2:f7:5e:14:16:77:0e:7b:
                    26:27:ae:7b:50:74:8e:07:c6:8b:1b:69:7c:7e:29:
                    5c:d3:27:48:d2:98:e4:d4:4a:7c:3c:73:c8:26:86:
                    f6:b2:91:63:8c:2b:80:f3:da:2b:38:d6:3a:48:c5:
                    38:fd:f5:6a:bc:42:2a:cb:07:17:4e:67:c1:18:97:
                    80:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:24:BC:D7:88:8A:C9:79:F7:C6:47:F6:BC:92:12:BC:C2:8D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ae61ff2-6024-386d-9c3d-57add2930b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b7:2f:4c:8e:c5:ea:55:4d:83:14:bb:e5:13:de:18:d3:34:
         47:2e:f5:5d:ce:ba:c4:37:fb:7f:69:1f:74:ae:1e:e8:d1:59:
         ad:72:09:cb:b3:d5:28:f9:27:ce:69:bd:23:23:31:36:0f:e2:
         93:b5:b6:8b:2b:7e:00:68:7c:ea:45:1e:58:ff:ac:0d:d8:09:
         b8:04:1d:12:4f:1f:3d:64:49:0a:77:8b:33:17:4d:ea:98:4e:
         fa:c5:75:d1:56:d9:6f:13:ad:9c:b9:d6:e2:a1:ef:d9:2f:fd:
         c9:ac:8e:73:20:d8:76:f5:5c:21:9b:12:8a:77:d6:b3:7e:84:
         99:67:8d:b1:78:83:e8:36:d0:2d:55:d3:a5:1d:11:67:f4:91:
         78:41:e6:d4:6b:6b:9c:1c:79:38:9a:94:98:74:d0:6c:5c:2e:
         37:73:4a:67:4c:68:23:6a:b2:67:de:07:4a:ca:25:7f:f5:9e:
         39:d4:9f:1b:8d:7d:36:51:eb:ee:de:62:b9:20:22:44:d1:e2:
         f8:2b:19:fd:a1:e5:5c:61:11:2a:e0:a0:e4:7b:d7:0f:89:bb:
         6e:63:f9:90:73:ac:0a:78:58:14:7d:aa:24:35:93:1a:5c:eb:
         d6:05:52:4b:b7:a9:b6:80:df:09:a4:87:72:ed:fe:6c:74:f5:
         e5:45:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:28 2026 by rpki-client