Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5005f1f-969e-39e7-b37a-c14aaaabe8c5.roa
File:                     d5005f1f-969e-39e7-b37a-c14aaaabe8c5.roa (raw, json)
Hash identifier:          cTcq7Ng3+IoQxBYY9rVIpRxzlZAtDhrL2dd3eKRVeaA=
Subject key identifier:   21:22:54:96:07:08:AA:81:F8:44:70:69:8A:F1:95:B2:EF:66:3E:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644BCC9D18A73260FDFBC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5005f1f-969e-39e7-b37a-c14aaaabe8c5.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     397209
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:bc:c9:d1:8a:73:26:0f:df:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=48ff941c-418f-4b15-b32f-f29bba253b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:ad:15:87:62:c8:71:e9:83:f9:83:97:38:
                    1f:36:b7:81:dd:c4:04:0a:3d:51:51:63:4e:94:84:
                    3e:fe:cb:65:61:fc:e4:36:80:dc:95:fd:41:fd:43:
                    7b:b1:5c:ba:0b:02:d1:42:5a:3a:ce:67:65:f7:47:
                    a0:0a:fb:fb:7a:4c:78:da:f0:71:fe:3e:49:e9:42:
                    a7:87:45:fc:a0:4b:64:b5:df:5d:99:bd:88:76:02:
                    5d:88:86:6e:65:0f:91:8d:c0:d0:19:fb:cd:01:5e:
                    73:ba:8b:58:4f:2d:f0:e3:83:8f:56:3a:09:86:94:
                    c4:23:55:e2:e9:ca:9e:b9:84:2d:06:c3:e6:46:30:
                    b7:b2:6d:4e:cc:74:16:28:fa:f1:fd:da:57:1b:d4:
                    42:9d:da:c7:8c:7b:f9:b7:af:08:76:3b:a1:fe:08:
                    18:18:de:aa:09:4e:4f:6f:fa:46:ff:f4:7d:d1:b5:
                    be:72:8a:e1:ce:aa:17:8d:15:8f:27:a5:3f:d6:af:
                    b9:ae:50:25:5d:f2:fe:ad:4a:0c:72:e1:15:06:ef:
                    2b:7b:62:e7:ef:ac:7a:2f:83:c7:47:6e:59:08:86:
                    29:45:48:10:5c:b3:84:67:a5:5b:2d:f7:42:f0:0c:
                    68:96:c7:fb:08:fc:b7:05:c1:42:cd:40:d8:ec:7c:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:54:96:07:08:AA:81:F8:44:70:69:8A:F1:95:B2:EF:66:3E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5005f1f-969e-39e7-b37a-c14aaaabe8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bc:91:1a:87:bd:e7:c6:0c:88:b4:c4:cf:d7:13:58:18:2c:
         e6:95:a3:92:34:aa:9a:8b:18:3a:77:65:4a:73:a2:29:38:95:
         ab:32:76:28:ef:cb:d3:f8:47:7b:6b:c7:49:90:b6:9c:e8:77:
         55:4d:cb:15:68:53:74:18:45:f2:73:b4:b2:d1:73:06:fb:fd:
         5b:43:b7:8f:9e:8d:9e:57:54:e1:46:58:02:95:a5:40:97:57:
         94:20:ac:5b:b5:a1:50:34:11:d2:a5:cd:49:ef:cd:15:25:4d:
         6c:32:d8:b6:7b:cb:e3:a1:2b:5b:7d:7d:c6:23:41:01:c8:57:
         0a:fb:fa:0f:25:2e:12:1c:3a:e8:0f:27:c1:9e:c0:1c:86:3f:
         ed:14:a7:4f:e8:c4:fb:2e:60:16:4d:1d:bc:a3:ed:59:59:52:
         b4:c7:29:9f:cc:d7:20:2a:58:c9:97:00:c0:54:55:f2:db:c0:
         e9:53:b5:23:fe:85:f6:37:10:e5:f0:c3:8b:ea:a9:10:65:d7:
         9c:d2:1f:e1:d4:2a:77:a6:a4:0e:81:52:0a:51:18:50:ad:c2:
         d3:89:e3:96:49:23:c3:78:2f:a6:82:7d:64:0e:bd:e4:53:d4:
         dc:93:fd:70:90:9c:ae:26:cb:cc:c5:4a:ab:ac:24:16:50:9e:
         a2:f4:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:50 2026 by rpki-client