Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e575250b-3dce-35ae-abae-9f62467ec933.roa
File:                     e575250b-3dce-35ae-abae-9f62467ec933.roa (raw, json)
Hash identifier:          lJjVXhihtZaUd4Ql/IRq53Lgg+gE5mgk71kY7dmNcGA=
Subject key identifier:   E3:D8:06:3F:E2:5C:CB:2D:26:27:56:B8:9D:97:68:5F:4D:2E:25:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E0013143003FBAF9DFBFFBC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e575250b-3dce-35ae-abae-9f62467ec933.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     397197
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:13:14:30:03:fb:af:9d:fb:ff:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=fe7ce683-83fe-49b0-a02d-dbc48e872d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:68:ed:db:ff:6b:0d:12:72:b4:d6:56:99:
                    6f:a3:93:72:14:2b:42:fd:0d:1d:f2:8c:78:82:ba:
                    bb:66:99:97:43:59:09:c6:56:b3:07:5b:73:28:50:
                    14:6d:1f:21:57:b1:e3:a7:5a:a0:23:61:a6:a0:6d:
                    1e:12:e9:8b:e7:8b:ad:1f:2f:67:e3:16:ea:56:70:
                    16:50:15:94:8b:a4:c6:ce:f8:8c:17:1b:e5:ec:f7:
                    ae:7a:8b:40:75:6a:f0:52:b6:c0:ea:a5:8f:42:96:
                    58:db:7f:69:f3:5e:14:ec:84:fc:df:f0:3b:9f:07:
                    ef:7c:44:ae:2c:22:f0:b9:11:47:54:b7:4d:61:9b:
                    b8:b4:a6:7a:2e:f4:90:94:6f:3c:d2:d0:03:04:47:
                    37:76:27:db:b4:39:0e:8e:6c:38:67:72:ba:fc:1e:
                    e7:ce:88:fb:3b:55:b7:ad:b2:03:ee:f8:66:5c:6e:
                    65:44:43:57:87:e0:52:ed:a4:fe:fd:68:d5:c9:70:
                    d1:61:c0:85:b6:59:d9:75:60:34:ea:b1:7e:c5:3e:
                    ef:e1:a1:22:6d:16:f9:f0:14:f0:77:bf:9b:35:8b:
                    d0:5b:7d:7f:4f:8a:9a:37:25:36:85:74:54:e8:df:
                    1b:63:3e:00:96:5c:65:18:f9:39:5f:fd:50:d3:7c:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:06:3F:E2:5C:CB:2D:26:27:56:B8:9D:97:68:5F:4D:2E:25:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e575250b-3dce-35ae-abae-9f62467ec933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:24:9b:89:41:12:bc:ef:ad:7c:49:41:2a:01:a2:ed:88:
         28:f8:f4:8e:5f:63:b9:ab:03:d2:3a:7f:a5:ca:59:12:14:5f:
         20:c6:0a:51:b8:01:03:5f:8e:16:54:ad:87:0c:80:a2:ae:80:
         70:d8:32:75:50:a4:c1:43:b3:d6:ac:c5:b7:fd:63:21:9a:fe:
         6f:40:0f:b7:44:9b:af:0a:86:40:4a:24:67:cc:c1:b5:77:de:
         09:e0:b3:fb:df:ef:39:9e:d0:23:ca:ff:2f:ef:a7:25:cd:79:
         96:11:a2:66:32:cc:47:29:a2:6b:c8:de:eb:97:b5:4c:92:0b:
         23:91:a2:3b:ea:0f:5e:b3:7f:45:ce:07:f0:6b:69:17:62:53:
         99:de:4b:33:84:ab:ef:3c:da:7f:09:3d:de:0d:4e:7e:8b:24:
         94:f3:a5:84:70:a7:76:b8:01:fd:07:1e:98:8a:09:85:27:ef:
         3b:e4:ae:9f:24:62:db:fb:79:1f:0e:d9:16:45:ac:e4:50:7e:
         34:dc:95:82:cd:5e:57:42:5a:b1:5c:db:26:9a:ac:a2:10:46:
         db:32:7e:a0:7e:78:3a:23:e0:c0:ba:2c:e6:de:21:d6:f5:1b:
         67:94:7b:f0:85:bf:dc:a1:b3:b1:12:15:ad:54:2a:8c:fb:ee:
         83:e2:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:55 2026 by rpki-client