Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc26008-e9cf-333d-b4fd-72b40021c1f6.roa
File:                     ebc26008-e9cf-333d-b4fd-72b40021c1f6.roa (raw, json)
Hash identifier:          kYQOtDNdenBhgZbt+f0enV29vD5avw3P+odxNmmiyD0=
Subject key identifier:   71:F3:B2:BC:D9:EB:E6:F5:7D:3C:67:17:19:A7:4D:7A:A1:A3:08:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0BDD1A6E15234CE97CABB270
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc26008-e9cf-333d-b4fd-72b40021c1f6.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     397198
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:1a:6e:15:23:4c:e9:7c:ab:b2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=e791fbfe-c444-4c38-8ca3-837e596422f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:09:0a:69:49:84:09:1e:50:ed:9c:11:34:
                    55:81:64:b3:1b:16:ef:c1:b2:2f:b4:7d:09:99:8b:
                    58:7e:80:95:45:22:35:eb:f3:8b:51:70:c5:a1:0a:
                    30:f3:17:c7:dd:d6:40:32:d8:dd:4c:dc:cf:a7:19:
                    9c:aa:4c:02:13:f8:c6:a8:ba:17:41:c7:16:ef:82:
                    26:d2:63:bb:bd:fa:e5:fe:0f:a4:b8:18:8a:d4:3e:
                    08:66:37:1a:f7:3c:2e:8f:14:03:19:10:ae:3c:56:
                    42:f4:7f:e7:fe:a4:70:d0:6c:1f:55:0f:86:1b:22:
                    3b:4c:d5:84:43:13:5f:b8:61:ac:99:71:82:db:8a:
                    02:48:e9:28:45:ad:ab:1a:cc:af:55:e9:68:81:f0:
                    3a:0c:36:a8:11:87:4f:b9:c3:3e:c9:36:e8:8e:cf:
                    dd:4c:26:46:4d:68:b3:53:b3:24:36:a6:1b:c8:89:
                    60:42:57:f9:2d:bd:bb:29:c1:ee:c2:98:00:f7:11:
                    09:31:fd:7f:cc:0d:65:ec:3d:81:49:82:14:20:43:
                    ce:28:3e:4d:97:3f:30:02:b4:e6:f9:83:25:3c:ce:
                    ce:0b:57:64:78:db:c0:62:3e:dd:b6:d8:b3:b3:41:
                    f5:54:71:b3:e7:04:a0:1f:bf:99:db:60:b6:5d:45:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F3:B2:BC:D9:EB:E6:F5:7D:3C:67:17:19:A7:4D:7A:A1:A3:08:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc26008-e9cf-333d-b4fd-72b40021c1f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:47:fb:71:f7:9c:67:bd:83:0b:db:b3:27:56:17:ef:c9:39:
         a8:a9:1f:37:8e:ef:bc:73:82:47:d7:70:47:01:dc:6d:44:68:
         68:8b:06:19:fa:27:50:a9:75:1e:c9:bb:be:22:54:66:a4:37:
         49:a8:2c:d1:ea:f0:2e:ae:60:d8:cd:6a:0f:5c:ed:e5:e9:4f:
         ef:7f:f9:02:62:21:57:78:cb:de:b6:3a:f1:bb:77:41:98:49:
         d6:11:44:b5:d0:29:16:6f:6f:fa:01:2b:40:82:f1:12:1f:7d:
         47:f3:49:a9:cf:bf:27:49:84:3e:68:66:07:a6:29:0f:4a:ec:
         7b:30:67:a8:9e:c1:76:6f:34:2d:c7:0b:ff:b9:b4:7c:41:ad:
         53:fd:73:6b:4a:5d:90:c4:84:91:61:89:36:a0:55:15:f5:83:
         d8:87:0d:58:91:95:3a:96:fe:ba:ef:51:98:0f:9e:56:7e:e5:
         e1:d7:fb:2b:0a:90:ef:c8:55:09:e4:7c:f3:c4:f1:49:b8:da:
         d2:0e:20:37:41:ad:2a:e1:30:56:a0:eb:f9:43:d4:80:66:ec:
         10:62:66:91:cc:30:11:fb:fc:4d:9b:29:81:99:67:31:d7:63:
         94:e3:4a:c1:2f:d4:7e:56:b0:b3:19:44:53:ad:7b:e7:f7:d8:
         a9:96:b7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:46 2026 by rpki-client