Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e84bad29-8d16-3516-9da9-da95c91c340c.roa
File:                     e84bad29-8d16-3516-9da9-da95c91c340c.roa (raw, json)
Hash identifier:          JXuDd1UeCi12oQk9hhoICoTu9BAf5F3VwnFxoPwXhZo=
Subject key identifier:   70:DC:06:A0:2C:C7:92:26:ED:00:14:57:F7:A0:F7:BE:5B:58:7D:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C03686E5836E46069A1F100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e84bad29-8d16-3516-9da9-da95c91c340c.roa
Signing time:             Tue 03 Mar 2026 15:18:08 +0000
ROA not before:           Tue 03 Mar 2026 15:18:08 +0000
ROA not after:            Mon 01 Jun 2026 14:18:08 +0000
asID:                     396606
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:68:6e:58:36:e4:60:69:a1:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:08 2026 GMT
            Not After : Jun  1 14:18:08 2026 GMT
        Subject: CN=db74647e-aa3e-4b1b-98a9-19d313b01135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:54:08:2c:1d:3d:86:60:b0:43:71:14:7c:
                    b9:12:ed:ef:69:1d:62:07:8e:92:b6:9a:74:70:c8:
                    5a:a4:17:00:b5:2a:29:b1:ca:a9:21:f8:cd:8a:95:
                    35:ec:a6:7e:6a:15:a2:d1:8d:39:e5:6f:f6:e4:ed:
                    49:6b:e9:3a:fc:7d:d5:90:a3:cb:8d:24:b0:34:bc:
                    46:3a:ec:d3:d5:96:b2:11:86:ef:00:fd:66:2c:66:
                    f2:0d:ff:12:2d:9a:1b:62:e3:37:f9:ab:49:b0:3b:
                    fe:31:3b:ae:45:ba:d5:e1:01:f4:4b:7a:56:80:5f:
                    b2:6c:aa:43:41:01:8b:38:31:33:89:24:91:a1:b8:
                    78:12:10:ed:0c:46:70:55:ac:ef:b1:30:fb:d3:1d:
                    0d:2c:f6:34:3c:ed:3c:73:93:56:14:06:53:3a:57:
                    0c:56:ab:9d:9f:f2:3d:76:13:03:99:c1:e0:2b:5b:
                    78:0c:c1:8a:b3:7e:48:6e:cf:89:df:d9:6d:ad:e8:
                    d4:a1:5a:68:69:37:c0:85:15:f9:b7:dd:3e:96:02:
                    a9:59:2e:b3:72:28:c1:09:88:d0:25:48:d7:e9:8d:
                    58:85:ed:8f:9f:c1:f8:8e:d9:d1:ef:75:e9:04:b4:
                    22:6a:15:a6:f2:32:de:4b:22:70:20:bb:f6:a0:b1:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DC:06:A0:2C:C7:92:26:ED:00:14:57:F7:A0:F7:BE:5B:58:7D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e84bad29-8d16-3516-9da9-da95c91c340c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:d7:42:f3:f7:df:3a:6a:2d:87:b8:7e:5a:8d:10:5b:df:
         a7:e5:23:e1:03:45:2f:5c:b4:b8:39:3b:a5:71:e1:2c:8a:c1:
         15:fe:05:1e:f3:f9:6d:d5:4f:26:cb:e3:10:a3:8a:dd:e2:07:
         eb:8c:7d:22:25:eb:8a:76:37:b3:44:2d:80:38:92:0a:b1:8b:
         11:ce:5c:5a:44:88:21:73:1a:df:1b:1a:6e:d5:56:5d:44:a6:
         bc:ba:5d:c8:07:60:57:42:f4:04:e8:bc:00:81:72:62:8d:9e:
         70:b7:e0:95:1f:e9:1a:7a:7a:b4:75:65:62:a6:3b:5c:0c:6d:
         0d:09:3a:71:e5:cf:70:94:83:51:35:1e:f2:da:de:32:a4:8d:
         56:71:dd:98:a7:f7:01:2b:18:3a:ce:27:b3:6f:8c:67:e3:50:
         08:60:5d:cb:f5:0b:2a:6a:55:1f:dd:1b:38:02:02:fb:39:94:
         e6:3f:c8:49:a0:88:2d:0f:a3:d1:2c:3c:13:bc:f4:40:39:57:
         68:63:4a:fc:f8:7e:8b:c3:11:eb:3b:0c:ac:23:25:c7:c1:65:
         06:30:5a:63:da:11:3a:5c:f4:74:68:4e:91:b7:01:87:1b:65:
         c0:98:ae:94:a9:0b:7a:1d:a2:46:dd:da:2c:9f:f9:63:ae:6e:
         59:a0:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:23 2026 by rpki-client