Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82eac725-08eb-30dc-aca1-515fe103bc26.roa
File:                     82eac725-08eb-30dc-aca1-515fe103bc26.roa (raw, json)
Hash identifier:          ks4+9/gEs3AYNLbCYFLyfZptmS9UawBe3+4qMvroyjE=
Subject key identifier:   2D:F0:01:76:BB:1D:FD:37:C8:4D:72:80:FA:3F:BB:87:76:55:97:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D42AF9A133ADDCCA6F380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82eac725-08eb-30dc-aca1-515fe103bc26.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396549
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:42:af:9a:13:3a:dd:cc:a6:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=34480370-ef0e-444e-8ad0-f156f37332b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ec:ca:3e:d0:20:be:1e:37:5c:42:17:8f:ac:
                    55:06:85:00:d5:44:61:8c:8b:2a:06:24:34:f7:9b:
                    cc:6e:1b:d1:06:2b:5c:1f:91:d0:b4:eb:1c:17:95:
                    1a:00:76:40:7a:0e:2c:a1:6d:25:83:48:49:b9:91:
                    94:5a:da:2e:6f:7c:6e:da:31:73:22:5c:ce:8c:b9:
                    8b:bf:d5:0e:85:37:81:1f:8b:99:30:e5:ec:e1:6c:
                    0c:49:3e:c3:cd:0a:01:0e:f9:86:37:56:04:28:36:
                    57:9f:d4:af:c3:59:af:02:b8:f2:7a:87:18:39:08:
                    dd:3a:bc:c9:f4:10:4c:38:f7:ab:b0:84:f0:3d:5c:
                    f8:c7:d6:5d:2c:98:a7:b7:83:3c:36:5f:6d:d2:48:
                    80:57:2e:27:93:19:4f:57:69:74:d5:f4:a0:94:e3:
                    25:7d:07:9a:d2:88:9d:59:47:23:7b:e9:81:0d:d0:
                    ba:b5:b2:f1:97:d3:3a:1b:a7:2c:ea:07:d5:c0:7a:
                    55:c8:08:96:2c:c2:19:7e:bd:95:36:20:70:a7:29:
                    5c:1d:d5:77:41:34:03:25:88:4a:15:88:73:e2:95:
                    6b:35:d1:31:6e:70:ee:ab:6f:dd:93:74:ac:7b:70:
                    e7:0e:ca:91:e5:62:24:84:2c:6f:8b:f1:aa:00:2c:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:01:76:BB:1D:FD:37:C8:4D:72:80:FA:3F:BB:87:76:55:97:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82eac725-08eb-30dc-aca1-515fe103bc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2d:a4:2d:c4:b2:95:8d:7b:91:9d:9a:59:2a:b0:a9:3e:35:
         e8:0c:7c:59:a9:31:fd:32:ee:99:8e:d8:1c:c8:cb:01:51:ba:
         9e:e2:72:3e:14:35:20:ca:d9:7d:6d:31:bd:79:d1:fc:fe:a4:
         8e:77:b5:31:6d:04:91:e6:64:c3:65:7f:5f:de:f6:39:60:01:
         2b:70:37:d2:be:a3:d0:ee:5a:67:d1:43:a7:dc:99:df:f8:40:
         49:cc:d3:f8:b8:a4:ab:34:b7:c8:57:09:42:54:da:fe:c6:6e:
         18:7c:05:ff:39:1a:95:70:1b:30:b0:cb:ba:45:39:57:60:61:
         bd:99:d1:f1:b6:93:80:82:9e:e2:a7:f2:01:e2:2f:86:8a:60:
         1b:15:55:e4:86:12:f9:b9:4a:dc:b2:6a:b9:b0:a3:44:d1:88:
         9a:76:42:47:ef:dd:ef:67:70:ae:19:ca:e9:cb:0d:c6:8e:e1:
         6f:d0:0a:35:8a:50:92:98:d4:c3:f6:d9:88:d6:60:ed:63:bd:
         63:b8:4e:bd:cd:98:ae:ea:cf:62:c0:93:36:85:fd:c6:69:94:
         74:03:21:db:42:a7:6c:3a:0b:f1:69:99:2d:68:a2:81:ab:9b:
         4f:c5:83:5c:94:53:97:23:91:87:70:f7:5d:29:89:b8:c6:08:
         f2:74:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:24 2026 by rpki-client