Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf43df4-e649-341e-9e3e-44122e2ae782.roa
File:                     eaf43df4-e649-341e-9e3e-44122e2ae782.roa (raw, json)
Hash identifier:          JqmYh3hHdqWzzNkce39685e2pOESHO7YDSqeVc2SQQg=
Subject key identifier:   99:DD:BB:FA:61:7F:AA:DC:92:DC:3B:E2:A7:DD:F6:AD:13:10:71:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0BDD16D8DA7723CB4588A460
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf43df4-e649-341e-9e3e-44122e2ae782.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     396585
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:16:d8:da:77:23:cb:45:88:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=cd795d1d-db6f-469e-97e1-2f80aa7ed758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:96:6f:ae:7e:b2:55:e8:03:c6:66:b9:3e:
                    0a:20:d9:ca:a2:8c:35:ef:cd:d6:1d:91:48:f5:0b:
                    b1:36:d4:31:c4:47:ac:28:39:70:1d:af:24:58:77:
                    44:dc:d7:bd:f3:c9:59:f4:1c:30:0a:9b:ab:c0:e7:
                    0a:dc:55:8b:31:f2:0a:4c:88:7c:7a:48:2c:e3:28:
                    74:60:35:07:17:9a:da:3b:41:30:ef:9b:2a:85:df:
                    b7:85:ea:20:29:ad:d2:c7:dd:86:01:f2:2d:0d:ce:
                    9e:87:b4:75:10:ba:69:7b:e4:e8:0b:b7:7d:ea:4b:
                    84:b6:bc:11:d7:06:eb:8a:42:e7:50:35:74:ab:16:
                    0d:15:e2:6b:cf:f1:d3:b9:eb:f8:d2:92:84:d7:d0:
                    f3:c8:ce:5a:51:1c:d4:8c:73:4b:41:ca:c9:a3:60:
                    85:bf:18:45:72:37:4d:dc:bd:34:b2:6e:18:34:05:
                    fe:64:c7:b6:ba:2a:20:68:fb:0b:cb:ec:47:64:b6:
                    e8:c8:b3:3c:78:9c:12:aa:c4:7d:fb:e9:20:ba:3d:
                    c9:40:5b:c6:ec:c8:dc:4e:88:c3:55:9a:a0:9f:cf:
                    3a:b9:ad:bc:d1:1a:48:2b:a0:55:88:9c:43:12:65:
                    91:c2:c7:f8:2c:ed:21:84:d3:07:6a:aa:1a:ef:12:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DD:BB:FA:61:7F:AA:DC:92:DC:3B:E2:A7:DD:F6:AD:13:10:71:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf43df4-e649-341e-9e3e-44122e2ae782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:d3:64:7c:25:de:4e:60:6a:cd:82:82:60:57:3f:ab:70:
         1c:f2:11:31:b4:fc:ef:4d:21:90:3d:e1:3e:df:ab:09:48:79:
         6b:cf:3f:40:aa:c0:d3:03:f0:b0:77:64:f6:65:cf:32:f7:7a:
         b9:cb:7a:74:61:b5:4c:99:c4:30:c0:78:1c:78:a4:5c:af:47:
         2f:39:58:75:0c:f8:03:7c:3f:b8:65:34:a2:91:97:d4:9c:b4:
         9f:54:38:2f:dc:71:a4:8f:85:7a:a0:89:4d:59:88:43:9a:c5:
         c9:39:be:04:75:aa:cb:25:e6:a8:02:77:d2:fd:50:43:94:c0:
         b7:b4:e4:27:e8:ea:ab:5f:3a:e2:a3:8e:a9:4a:88:a1:cc:6c:
         2e:4b:77:ab:b5:69:c7:34:ef:c9:0e:d0:b3:5d:ce:b8:18:1a:
         32:7f:ef:ec:91:59:e0:86:da:74:f8:04:30:ba:23:2c:58:3f:
         82:5a:64:3f:7b:e6:c8:86:29:13:a1:42:a7:5d:70:1e:ac:ad:
         a4:06:32:3d:d6:82:22:9d:f6:0b:fa:ec:0b:c3:d7:a5:5c:bf:
         ef:54:80:3b:58:7c:f8:ed:6a:df:1d:f8:a5:80:8d:2d:eb:30:
         a1:ef:f4:13:3e:c1:fe:1d:fc:31:48:b2:d4:f7:67:26:63:70:
         51:63:cc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:22 2026 by rpki-client