Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa
File:                     7c76ecf2-2297-3c26-9f04-12848583062a.roa (raw, json)
Hash identifier:          XJvSLrptv9LMjnTPz4tI5Vv7aX6qMyZAy+HsWX9of50=
Subject key identifier:   36:F1:1C:58:DC:7A:C9:3C:E6:50:59:E4:D4:05:5E:C1:94:2D:4A:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D359FDED43E9CFD7F2B078B20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     7342
IP address blocks:        2001:502:8c25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:de:d4:3e:9c:fd:7f:2b:07:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=215d5894-65fb-4f02-a8e7-783f125bdcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:43:fb:c9:8e:c2:0f:0c:fb:37:0f:23:f6:
                    a5:37:f2:46:67:ed:67:57:99:f2:ed:20:f1:86:63:
                    4e:e8:a3:77:1b:63:f7:b6:ed:e5:4a:3e:71:a2:a8:
                    39:bc:3d:dc:1b:96:db:eb:65:8c:39:cd:90:82:5a:
                    63:90:f8:54:c0:2a:96:19:87:aa:b9:38:b2:00:b4:
                    f6:b1:f0:80:b6:61:61:57:94:db:d9:56:9c:cd:05:
                    91:7e:ba:4f:7c:24:f3:2e:13:9f:6d:3f:f3:8b:ce:
                    24:ed:0b:d4:ff:c3:1c:d7:3d:6c:33:35:c9:26:e4:
                    8b:15:2e:04:a8:4b:ff:ad:bb:23:fd:f4:a2:98:85:
                    91:60:0e:ab:06:f5:2b:73:79:d5:2a:24:94:54:90:
                    c1:45:2e:cf:e6:de:73:e8:97:c0:ad:67:17:ec:90:
                    7c:21:7f:2e:32:ac:6c:77:82:f1:7d:0c:f5:18:7e:
                    96:7d:32:d8:16:08:f2:8a:6d:23:75:84:4b:bd:5c:
                    6f:3b:6f:e2:c5:bd:08:56:53:08:cc:26:cc:2d:f5:
                    cd:96:26:13:c6:60:0f:6a:11:b0:f1:e5:83:36:45:
                    90:9e:b2:dd:04:1a:99:28:a8:66:dc:2b:5e:ca:9f:
                    bd:ec:8a:17:06:5c:96:d6:b9:13:1e:2b:e4:31:89:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F1:1C:58:DC:7A:C9:3C:E6:50:59:E4:D4:05:5E:C1:94:2D:4A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8c25::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:79:a7:81:ca:70:e0:1c:10:5f:21:86:9c:12:9c:a4:55:9c:
         77:60:ac:72:a4:76:1d:60:20:7f:e0:40:d7:5e:22:5c:23:54:
         a7:9e:5e:95:c0:27:e3:74:10:a0:aa:37:4e:cb:61:68:59:1d:
         95:83:ca:8e:90:4f:4b:cf:f4:d5:bd:e3:ac:d4:d3:d9:a9:21:
         26:d1:5f:d7:61:94:d0:92:df:55:e7:3a:3d:9d:b3:19:fc:c7:
         c9:c3:19:7a:03:33:18:e1:8e:a6:38:48:25:e3:10:ad:07:87:
         f5:b5:f7:2d:a5:21:29:06:36:ed:3a:78:62:dc:d0:7b:c0:bf:
         27:6d:68:eb:07:be:a4:60:73:a7:3b:97:ed:e1:7b:f1:a9:bf:
         3d:15:d5:63:8b:58:d0:a8:18:73:bc:ac:a0:ae:9e:d5:2e:19:
         e3:cd:b7:8d:a5:1c:65:bb:6d:41:d0:cd:af:47:e7:1d:d7:36:
         31:53:9c:a8:6c:0f:00:12:5b:da:bb:e3:ca:aa:9b:1c:e7:55:
         58:4e:a0:37:8f:bb:0f:5b:c3:a8:c5:cf:01:6c:95:89:00:7e:
         ae:4b:46:6a:0f:47:6f:2b:fb:27:53:98:0b:36:b6:6a:c5:cc:
         cf:fa:86:49:68:e1:47:4d:31:9c:4a:e7:60:e5:ea:87:2f:49:
         51:17:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:52 2026 by rpki-client