Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e37e6d6-ca70-339d-96fb-a19748429aec.roa
File:                     9e37e6d6-ca70-339d-96fb-a19748429aec.roa (raw, json)
Hash identifier:          4W9mny4ZZGJCOsxPl0x9Ssc8JZbo3nc4RPouOtxMmhQ=
Subject key identifier:   05:ED:0F:F1:D4:BF:F0:9A:4C:65:87:0F:36:38:D8:F9:9B:7A:B0:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C2FE571494912C45AB600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e37e6d6-ca70-339d-96fb-a19748429aec.roa
Signing time:             Thu 12 Mar 2026 14:31:02 +0000
ROA not before:           Thu 12 Mar 2026 14:31:02 +0000
ROA not after:            Wed 10 Jun 2026 14:31:02 +0000
asID:                     396584
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:2f:e5:71:49:49:12:c4:5a:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:02 2026 GMT
            Not After : Jun 10 14:31:02 2026 GMT
        Subject: CN=442d17e4-87d9-41df-9c01-403118a12db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:a1:95:f6:d5:ba:bc:84:b3:76:dc:c3:00:
                    5c:53:55:56:51:3e:a8:16:16:50:13:70:77:77:f3:
                    b8:77:d4:cf:45:27:00:b3:61:54:8d:9f:fd:6b:a5:
                    b5:b7:51:db:94:82:98:7f:ac:bc:72:05:ec:ad:46:
                    53:3a:fc:c0:c7:cb:51:23:36:d0:a7:b8:e7:f0:8b:
                    50:f6:cb:34:59:19:e3:32:cd:e8:9f:9a:a7:87:cf:
                    a9:d5:ea:f3:4b:14:2b:6f:09:12:71:b2:4e:57:60:
                    f0:82:4d:4a:fe:b5:ec:af:13:53:54:1b:5e:63:75:
                    18:a4:8e:fd:ed:95:fb:4b:2c:ab:40:2f:cc:27:76:
                    0a:f2:5f:0f:7f:1c:15:9c:58:01:ae:74:b2:1e:da:
                    1a:3a:ce:d7:2e:78:eb:4a:87:64:25:58:8a:7a:af:
                    dd:48:8a:a6:44:01:48:12:dd:c5:96:cf:11:02:06:
                    bd:10:03:37:81:f9:a0:e4:6c:cc:f7:0e:a5:f1:4f:
                    ae:36:02:3f:c8:54:64:70:c1:94:40:60:93:0f:02:
                    b3:db:5b:dd:23:5b:1a:a7:3c:73:bc:85:2d:50:d3:
                    a9:a9:20:86:ed:c7:1d:6d:14:1e:a7:27:4a:2f:8c:
                    f0:2a:ef:de:6f:36:98:18:47:a4:f8:3c:ea:28:86:
                    1b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:0F:F1:D4:BF:F0:9A:4C:65:87:0F:36:38:D8:F9:9B:7A:B0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e37e6d6-ca70-339d-96fb-a19748429aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:bb:fc:c5:48:47:3c:17:29:61:3d:22:bb:c8:a8:69:b3:80:
         16:2d:1a:44:09:e2:ac:13:0f:e5:fa:78:e9:f9:ee:82:bc:e9:
         6d:9b:14:fe:f4:f4:71:ff:03:d3:be:ff:ad:3e:84:7a:84:bb:
         f7:a9:8d:31:37:0f:39:b6:dd:9a:7b:d0:0b:5c:09:ff:c2:93:
         a5:07:2a:a9:55:38:95:c0:0e:cd:63:c5:16:5b:3a:f3:fc:ae:
         c1:e6:e7:b1:32:f1:28:cd:8f:ba:22:01:ba:fe:dd:34:81:3b:
         0f:3d:d4:c0:a6:5b:0a:3e:9f:44:7a:b5:61:a9:ce:85:87:b7:
         9d:b9:6d:5f:9a:be:4a:b4:c1:55:e6:e2:84:cc:ca:c3:d4:29:
         1e:ea:fe:0f:b4:b9:64:8c:e6:75:41:14:c7:ca:a3:9e:ba:3e:
         d9:c3:19:9c:e2:d2:84:e1:3f:b0:b4:75:d9:9b:9a:34:94:91:
         b8:fe:84:fd:5d:b2:59:d1:4d:35:c6:43:bc:53:c2:d5:ea:a7:
         00:4b:41:9a:78:1f:35:a4:fc:41:70:76:e5:f7:97:d5:8a:5e:
         34:bf:02:97:1f:17:c1:29:1a:73:22:2d:4a:86:49:8b:97:86:
         7a:8e:74:82:41:ce:8f:02:5b:b1:5b:a2:b1:a5:2d:5d:3e:5d:
         1e:ba:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:03 2026 by rpki-client