Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32225dc-4e70-3344-90cf-2210ac18eff5.roa
File:                     b32225dc-4e70-3344-90cf-2210ac18eff5.roa (raw, json)
Hash identifier:          QzQU5SPwenjEAkt2WwxWvTv6CW8GMknFcvvagoRJXyQ=
Subject key identifier:   C1:10:A9:F5:ED:38:82:CE:34:96:98:68:92:7C:A6:1A:9F:50:13:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C388AD140CB8BF6989B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32225dc-4e70-3344-90cf-2210ac18eff5.roa
Signing time:             Thu 12 Mar 2026 14:31:06 +0000
ROA not before:           Thu 12 Mar 2026 14:31:06 +0000
ROA not after:            Wed 10 Jun 2026 14:31:06 +0000
asID:                     396594
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:38:8a:d1:40:cb:8b:f6:98:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:06 2026 GMT
            Not After : Jun 10 14:31:06 2026 GMT
        Subject: CN=7f9bd838-03cc-4305-bfb4-8dbd1fa5afee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:58:31:b1:25:2a:8f:b4:a1:0c:03:71:67:
                    42:c9:c9:9d:c0:23:25:e0:e7:1e:8e:87:22:c9:c7:
                    91:e2:8c:46:0b:09:ab:ef:31:53:45:f4:a4:4a:51:
                    7c:4d:0a:6c:e4:9c:9a:44:03:af:12:8a:d6:2c:dc:
                    ac:ec:81:21:04:4a:ac:0a:dd:ac:9a:11:21:2d:99:
                    be:1f:81:32:a2:05:d8:b8:d1:b2:cf:af:fb:3e:e4:
                    d5:f0:90:39:1d:ba:4f:44:d7:e3:66:63:9f:19:fe:
                    66:1b:e5:4a:66:c5:23:af:1c:86:13:24:22:aa:e2:
                    81:0b:40:5b:a3:5f:7d:8d:e9:e8:75:3e:ec:09:11:
                    1c:22:f6:cb:b8:1a:6c:ba:54:f7:15:51:67:1d:3f:
                    6c:7d:78:82:66:47:0d:a7:b3:e1:57:a7:13:35:31:
                    bf:a2:82:6f:d3:29:b5:0e:d2:b6:5a:97:bb:2d:bf:
                    fb:46:81:81:f0:74:94:0a:c6:1b:4d:5a:48:7f:00:
                    5e:41:53:7a:2c:95:b9:27:fb:c6:b7:e4:47:43:b7:
                    8b:30:1b:38:11:ed:ea:09:bf:8c:9c:56:05:5f:67:
                    b5:63:d9:b9:5d:f3:6b:15:ba:05:ed:d4:c7:46:23:
                    77:98:73:3f:db:e9:f9:36:d5:c9:49:67:9d:72:5d:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:10:A9:F5:ED:38:82:CE:34:96:98:68:92:7C:A6:1A:9F:50:13:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32225dc-4e70-3344-90cf-2210ac18eff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:94:ca:39:c0:42:0a:ca:30:4c:20:22:49:51:3b:7a:00:93:
         1b:4c:9a:de:49:af:37:db:74:3d:a9:07:c2:60:ba:b9:b7:03:
         a0:00:d5:b1:09:cd:8d:b0:04:17:1e:1c:84:27:9e:66:41:93:
         31:b8:c7:bc:b8:14:8a:96:2b:7c:4b:4a:66:e1:26:71:0c:df:
         c9:b9:ad:92:71:48:83:49:86:17:5f:1e:6b:f9:61:f7:1e:aa:
         49:53:d1:82:f9:6d:41:17:72:c5:06:64:1c:07:78:11:ac:7b:
         ee:ca:7d:e3:83:b3:a7:67:02:f4:03:e2:80:c2:12:d5:2b:b6:
         ca:17:99:1d:ef:55:16:59:17:2b:23:4f:5d:2b:99:5f:97:ee:
         1f:45:d5:75:d3:e4:c3:48:78:24:01:a5:41:10:bb:85:11:f3:
         b1:54:6b:43:2b:f4:6e:20:b2:3b:13:fc:9e:cf:9c:52:77:d4:
         34:85:bb:ea:73:17:82:88:59:c9:3c:9e:9f:6e:3c:7c:fb:80:
         5c:08:b5:5f:27:69:73:4f:74:14:31:fe:60:89:35:62:a3:a6:
         33:3d:81:d4:2e:aa:72:81:04:05:56:33:ef:1e:94:cc:06:fc:
         66:0d:91:f4:42:e7:e4:56:ba:29:54:df:ec:64:90:f8:3a:fb:
         76:42:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:50 2026 by rpki-client