Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa
File:                     a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa (raw, json)
Hash identifier:          0U/avjEpu7w+QOdfJhdo2vFgDHs2FMgk3edtMu8W1BI=
Subject key identifier:   18:C1:1B:56:05:58:E9:02:38:08:E7:CE:B1:1A:79:45:7F:7C:CF:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C384ADE2EC5E11C61B400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa
Signing time:             Thu 12 Mar 2026 14:31:06 +0000
ROA not before:           Thu 12 Mar 2026 14:31:06 +0000
ROA not after:            Wed 10 Jun 2026 14:31:06 +0000
asID:                     396576
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:38:4a:de:2e:c5:e1:1c:61:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:06 2026 GMT
            Not After : Jun 10 14:31:06 2026 GMT
        Subject: CN=1036420a-21f8-4877-a101-b0e9050af1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:4f:db:d5:e7:a8:2d:c8:84:b7:fe:4e:11:
                    7d:d2:7b:af:5d:f3:99:66:af:b5:35:3d:32:6d:0e:
                    db:73:d6:12:64:98:27:23:18:c1:3d:ac:5c:d4:3e:
                    f9:08:ad:18:b4:69:9e:61:44:7f:36:0e:ef:b9:51:
                    94:78:cb:cf:21:0e:d5:92:ae:65:4d:0d:15:4b:37:
                    15:c7:9b:a7:82:20:28:4c:2f:72:6c:1e:e2:0e:1d:
                    be:73:c4:af:07:cd:51:31:70:f5:e2:dc:a7:1e:38:
                    53:47:f3:3f:19:f4:49:fb:6b:c0:b1:18:34:6e:b7:
                    b4:8e:d5:ff:02:82:d8:82:79:12:8f:c1:61:e2:37:
                    62:85:cf:0e:06:b2:f7:80:ff:a3:b0:42:47:ed:dd:
                    ff:36:09:7f:94:4e:03:4d:a3:93:e2:34:4b:1e:60:
                    2d:0a:f1:a2:87:6d:94:04:0a:fa:ed:14:cf:90:a4:
                    07:29:d9:c7:c8:cc:81:10:61:c0:c7:da:31:14:87:
                    25:49:7b:1c:2c:a3:17:d0:5d:97:7c:dc:62:d9:25:
                    58:b7:d7:1d:6f:32:a8:ed:e8:01:e3:92:fa:dc:00:
                    3b:b2:64:e2:ee:a4:62:7b:bb:b4:30:17:0b:00:dd:
                    a4:65:d9:ee:81:55:72:98:5a:0f:d4:3b:f0:9a:06:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:1B:56:05:58:E9:02:38:08:E7:CE:B1:1A:79:45:7F:7C:CF:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e6:86:8f:e9:46:cb:0e:84:89:ef:e1:7d:ee:22:4b:bd:36:
         42:d2:e0:e9:64:9f:fd:4a:d7:67:e6:39:ad:88:e1:fe:97:94:
         37:98:14:54:78:e3:ca:a9:c0:5a:4d:26:fb:6c:9c:95:a0:ba:
         1f:5c:48:7d:d8:f2:91:11:79:2e:15:c0:57:85:73:c9:fe:a7:
         06:48:e5:c6:8b:fa:f2:85:5b:8a:6d:48:fd:eb:c6:43:a7:80:
         0a:24:e8:72:a3:ff:4c:1c:3a:eb:f4:3e:c5:07:d0:4a:18:b2:
         b4:12:ed:37:0a:3b:45:8b:46:d4:10:fe:d1:3e:e9:2f:b9:40:
         57:df:19:cd:63:33:1f:db:48:96:6d:94:21:fa:de:54:d1:20:
         0c:92:6e:63:ce:47:7c:95:56:88:c7:94:7a:0b:31:53:e0:49:
         a1:75:04:2a:3b:f8:0d:77:f2:eb:39:f6:7d:50:1c:84:f8:66:
         53:80:0c:a7:3b:87:97:9d:64:9a:c1:55:aa:12:bf:03:39:6a:
         22:d6:ee:6f:15:a2:eb:7c:10:bb:7e:16:ef:e0:a4:a2:12:65:
         f3:d3:c6:2b:34:27:19:98:c4:17:d6:cd:fb:60:c6:9a:5a:a6:
         0a:3c:e6:9f:26:e5:cb:45:b1:79:1c:83:59:65:d5:79:bc:9c:
         e9:f5:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:01 2026 by rpki-client