Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa
File:                     ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa (raw, json)
Hash identifier:          qKd5577VL3SOQBmT3zqRqPto5OcJVJ2FKXRYEMdle5A=
Subject key identifier:   00:E7:5C:73:BF:B7:65:E1:92:AD:B5:45:FC:01:42:10:42:6A:C4:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A6740D56AED29904FBF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396547
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:67:40:d5:6a:ed:29:90:4f:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=9a477d6f-92a7-4bc7-a7d6-f35cbbdb3319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:28:34:1a:4d:e8:1f:d9:b1:b3:65:b6:2b:
                    6a:0f:6f:d4:12:65:f5:29:64:2e:04:8a:5b:17:6a:
                    65:26:ce:d9:ca:0f:12:bf:62:90:14:52:b9:99:7a:
                    7c:37:e9:b0:f9:11:a0:7e:9f:40:37:0b:ca:ef:67:
                    ff:16:1b:9a:8b:fc:81:16:2d:e0:58:1a:cc:ed:bd:
                    20:11:ad:3c:b6:98:1f:8e:78:93:b9:6a:09:c6:5d:
                    48:97:eb:f3:94:1c:f5:10:18:37:96:ae:91:62:81:
                    72:c4:c9:65:7a:ba:9a:85:e0:9a:63:df:13:fa:44:
                    0c:d7:30:12:98:96:56:f7:78:9f:5b:d6:66:84:da:
                    42:cf:e8:00:92:e4:b3:8e:c6:5f:d4:09:50:6a:32:
                    37:86:da:1a:f6:1e:70:c3:db:f2:78:15:3a:60:80:
                    89:d8:1b:5a:7f:bb:c4:27:9d:30:32:48:0a:67:41:
                    2d:3a:3f:d6:f4:c9:ba:a6:17:02:6a:b4:57:4b:f5:
                    af:d4:21:11:b2:8e:b6:bb:be:a5:8f:68:2a:ee:7e:
                    25:1c:0a:20:bc:a7:a5:1e:7c:34:16:9b:73:f4:6d:
                    a7:ac:b2:ef:6c:f7:9d:2b:03:1b:e5:72:83:d3:c5:
                    20:8b:87:d3:d1:4d:06:9a:8a:d6:09:c9:34:99:bc:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:5C:73:BF:B7:65:E1:92:AD:B5:45:FC:01:42:10:42:6A:C4:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:da:2a:ec:1a:d0:47:6e:00:15:0b:43:94:70:1d:34:6d:d7:
         88:14:f9:6b:a1:f1:fc:39:50:39:44:39:dc:c0:d7:75:c9:ea:
         f2:c4:a6:8c:d5:d2:5a:b8:bd:fd:d9:2f:45:5b:dd:37:f2:de:
         aa:56:bd:0e:f9:63:ea:33:ba:aa:06:c3:e0:4a:6e:39:95:33:
         fd:a6:f2:fb:1b:d8:49:f2:c0:c9:12:f3:cc:fb:d2:90:84:47:
         92:99:42:75:6a:ec:ad:4c:cb:5b:c6:2b:17:d5:07:97:55:20:
         73:09:f5:35:8a:58:ab:79:a1:f2:3e:4d:3b:a4:7a:ef:db:ea:
         2e:63:3b:ed:bb:78:50:e5:e2:89:7c:c1:d1:2f:c2:ac:a5:65:
         7c:a9:a4:e6:71:f0:ba:03:ed:e4:a5:38:2e:08:a8:ed:3f:bb:
         a2:09:f0:97:89:3a:0d:f6:dd:4d:ea:a3:22:e9:3e:bc:24:1a:
         15:80:ec:74:ac:42:a6:a5:33:7b:33:60:e3:55:cc:f6:43:ff:
         75:2b:8f:82:6a:41:dc:28:d3:4e:ff:fb:39:6c:44:bd:83:41:
         c3:6e:44:b4:ac:32:dd:c7:23:fc:ef:4b:67:ec:22:82:c8:4e:
         b9:aa:a6:4a:ca:8c:32:3f:49:bb:8c:19:06:8a:a9:21:cb:fa:
         db:bc:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:54 2026 by rpki-client