Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbecedcc-3dcc-3dcf-919c-2ed57b13ca0c.roa
File:                     cbecedcc-3dcc-3dcf-919c-2ed57b13ca0c.roa (raw, json)
Hash identifier:          lzMS4QKAkJ8RIkAQiyBjb38WppXewVbK2+h5V5zy+NE=
Subject key identifier:   72:EC:B1:52:31:CC:9A:4A:36:C9:75:7A:EF:B1:02:9D:75:15:B1:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D19B4E9B98784407A675CCE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbecedcc-3dcc-3dcf-919c-2ed57b13ca0c.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     397196
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:e9:b9:87:84:40:7a:67:5c:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=e31d8482-0ccb-4a76-a8c3-aa5fc2a7f3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:d5:f1:d0:06:16:62:69:05:15:1d:96:ad:
                    1b:87:3e:ee:45:f7:cb:de:8f:c1:80:c5:38:62:66:
                    1d:b3:59:77:33:24:91:18:12:e4:97:c8:10:35:70:
                    4e:af:9f:9f:49:6f:10:74:22:43:23:79:ad:d4:b5:
                    5f:9d:27:a7:93:45:1b:79:ec:59:07:a6:cd:6e:76:
                    a3:2a:28:a2:67:2c:e2:99:89:f4:e8:c6:61:ca:14:
                    eb:ff:7c:02:4c:f8:30:05:d6:09:7b:c4:6a:b0:68:
                    47:26:02:5b:29:1d:17:e0:bf:7a:eb:b1:ad:77:31:
                    69:6c:95:c2:64:90:6b:fa:ac:3d:59:77:df:19:e4:
                    e0:69:91:d6:0e:9b:be:49:bc:d1:e3:12:d8:2f:e2:
                    dc:4e:06:ba:a9:23:82:7b:4f:d8:64:79:69:c6:29:
                    28:1a:e7:31:e1:af:ba:1a:73:17:19:ed:b4:01:eb:
                    81:9f:20:35:34:75:c3:f3:b9:b0:ed:2e:7f:34:20:
                    c0:36:4e:ae:17:cf:71:0e:00:f3:df:c3:e1:42:0c:
                    5c:a4:10:6a:61:d7:a6:9a:0a:e0:64:26:43:1f:c9:
                    a0:36:d0:00:dd:bb:59:df:a4:87:0e:13:74:c9:e9:
                    16:78:a4:bb:39:2f:45:09:7d:60:04:b7:3e:da:cd:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EC:B1:52:31:CC:9A:4A:36:C9:75:7A:EF:B1:02:9D:75:15:B1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbecedcc-3dcc-3dcf-919c-2ed57b13ca0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:95:52:03:96:41:63:66:71:9a:6d:90:fa:cc:67:4c:7f:22:
         ec:ab:92:16:7b:3f:70:d4:25:5d:db:38:26:a9:8b:a6:d2:b6:
         55:fc:37:c7:e5:76:ca:09:b5:76:cf:29:d9:7f:b5:0c:0c:32:
         bd:e1:67:1f:0c:65:aa:06:b2:25:59:32:22:1e:17:fe:29:ee:
         ac:56:ec:af:c7:29:5a:5c:8f:09:75:b1:fc:aa:19:4a:b9:c7:
         e6:f9:29:b2:df:62:a9:45:ca:c0:c4:e7:29:b9:5e:3c:e2:2c:
         89:ee:5a:26:7a:5a:24:92:53:55:83:48:3e:19:ae:b4:8e:40:
         6b:6c:31:53:fb:e6:bd:2a:3d:13:9c:9a:3d:0c:84:d6:12:9f:
         c4:b3:68:bd:31:01:47:46:9c:1f:62:25:89:35:2d:70:45:fa:
         8c:90:54:b9:ef:8f:75:3a:b5:96:7b:a6:de:01:7a:1a:33:cf:
         db:92:62:cb:be:3d:9e:13:ef:e0:53:1e:fd:03:e4:32:2b:25:
         9a:7d:d6:a4:5d:ba:25:d5:64:ac:89:fe:1e:51:3e:0c:68:f5:
         b8:ef:da:a5:9b:aa:8a:c9:23:e0:9e:3b:2e:c1:9a:ad:d9:7e:
         b8:dc:a0:8c:a9:3f:64:e0:b3:44:96:af:6c:cc:fa:91:9f:c9:
         4e:75:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:46 2026 by rpki-client