Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a367f5a3-502d-3a09-a9bf-16efbde4103a.roa
File:                     a367f5a3-502d-3a09-a9bf-16efbde4103a.roa (raw, json)
Hash identifier:          rU/DLrd02xOpZLfrwDoGPLXgxhD4SLhBOosE5XTxk28=
Subject key identifier:   A2:BD:8C:54:F5:A5:20:BE:66:46:62:C3:CD:39:27:02:5A:27:8D:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A69ED9E0B6F52CA00DF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a367f5a3-502d-3a09-a9bf-16efbde4103a.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396592
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:69:ed:9e:0b:6f:52:ca:00:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=14e3b002-2524-4e86-87c2-86e51bea956f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:03:a6:c1:c8:10:ee:8d:87:b8:14:85:3d:
                    51:e6:8c:f1:5f:90:61:89:5f:4c:33:ec:a0:75:d4:
                    b1:78:75:65:1c:32:cd:1d:c9:2e:eb:b9:5c:e0:fe:
                    43:6b:5f:d6:b0:e3:a5:41:2f:c3:8c:17:d0:9d:b5:
                    a7:3b:68:b8:30:7d:65:4c:31:25:3f:22:63:28:5a:
                    f7:08:a0:17:9d:2d:89:95:1b:43:2b:9e:3f:76:c5:
                    1f:01:a4:ae:94:94:06:06:cf:ec:a5:8e:2a:1d:92:
                    35:af:04:8f:2c:46:f0:db:dc:8c:68:6a:84:18:14:
                    ca:3c:92:bc:ce:db:47:57:fd:f5:d5:d3:e0:ef:42:
                    4f:7d:a0:a8:48:1b:05:ae:e6:9d:87:03:d3:37:10:
                    c4:21:ac:36:e1:a7:f7:f0:e4:cc:4b:47:8f:b7:f8:
                    60:ad:3d:de:7f:64:77:7f:0b:5d:bb:84:b4:d8:d9:
                    e0:2a:e0:02:9e:52:4b:c6:fa:c9:2e:7d:ad:11:01:
                    81:21:a7:71:ac:d5:b7:70:68:ce:bb:20:d3:6f:ca:
                    f9:7a:63:ea:b2:48:f8:17:46:77:c3:b4:25:4f:f0:
                    a5:06:68:34:4a:6b:6f:af:fc:ce:c8:02:38:6c:68:
                    e1:34:c6:ce:06:99:76:6f:0f:ca:69:2e:d7:51:c8:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BD:8C:54:F5:A5:20:BE:66:46:62:C3:CD:39:27:02:5A:27:8D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a367f5a3-502d-3a09-a9bf-16efbde4103a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:cb:f7:43:26:fa:da:ee:e5:9f:bb:df:6b:16:28:6f:4c:
         6a:18:12:b8:2b:12:fb:3c:03:fc:90:c5:43:ac:ca:1f:21:48:
         9a:8f:84:d3:aa:9b:ad:6d:e0:30:97:93:a0:90:f4:33:a0:ca:
         6e:39:82:ab:8c:62:e2:82:ca:98:8a:a2:41:ab:07:db:1e:01:
         a7:7c:ff:14:fc:d0:c5:c0:f5:29:20:e3:c0:9f:51:35:3a:d8:
         9b:98:fc:49:26:ef:cb:ba:5b:fe:5e:c4:6b:37:dd:e3:cf:78:
         96:bb:61:a2:c4:af:b5:af:23:10:e5:10:48:a9:4d:f2:35:49:
         a6:c1:a8:b2:55:a0:8f:67:a0:91:6a:68:09:fa:bc:1e:e0:1b:
         e3:5f:b4:5f:f0:1e:b2:31:be:df:1e:15:0e:38:91:33:aa:b0:
         28:7b:c4:62:8b:66:a7:65:79:a3:bd:ab:d1:d7:11:67:4d:4a:
         be:3d:c1:4b:3b:05:f9:32:48:37:d0:5b:36:76:d7:f4:9b:f5:
         60:56:c8:bf:ff:ad:5a:62:f2:ee:29:57:f3:a5:14:f7:6b:7b:
         4c:1d:3a:e4:b0:0a:0c:24:c0:e5:26:fc:2c:a3:df:a6:4f:29:
         ad:6d:d4:d2:ca:88:9e:d4:fe:28:d5:c5:a8:1e:d1:a7:65:6a:
         bd:77:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:09 2026 by rpki-client