Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efd2b718-b62b-396b-bc56-2f2e8d305112.roa
File:                     efd2b718-b62b-396b-bc56-2f2e8d305112.roa (raw, json)
Hash identifier:          AINV1FkmP9QWBbiyjIX+pbqfOdJbL/2INd1mPbNRklk=
Subject key identifier:   DE:D4:45:6D:C0:09:BC:F0:4B:12:0A:75:C7:4E:E2:D8:C9:B3:F2:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F759D3FF156642633E4F6A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efd2b718-b62b-396b-bc56-2f2e8d305112.roa
Signing time:             Tue 10 Mar 2026 14:28:37 +0000
ROA not before:           Tue 10 Mar 2026 14:28:37 +0000
ROA not after:            Mon 08 Jun 2026 14:28:37 +0000
asID:                     22547
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:9d:3f:f1:56:64:26:33:e4:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:37 2026 GMT
            Not After : Jun  8 14:28:37 2026 GMT
        Subject: CN=a8ab9c36-f3c3-48c6-af45-9b2d3a67c341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:31:7e:7e:45:27:85:f2:21:4b:ab:09:29:
                    ea:a2:37:d3:85:13:c8:14:1d:f3:09:f5:59:42:23:
                    e4:77:d3:62:2f:89:4b:23:25:61:f6:ef:fa:c5:4d:
                    db:57:41:3f:20:ea:36:ba:aa:cc:41:51:3d:10:22:
                    6c:13:00:3b:2a:2d:00:a5:c1:eb:c6:ba:57:cd:85:
                    c7:4a:22:58:a6:b4:da:c4:f3:61:01:e0:b5:2c:5f:
                    03:7e:1e:2a:d2:04:99:0d:04:d4:ae:4d:a6:e8:6e:
                    88:d1:10:1b:0d:ab:9d:f7:b1:56:01:23:87:d3:75:
                    66:e9:6b:7a:c7:38:0c:e3:cf:d0:60:04:ed:e3:16:
                    96:6a:35:18:68:97:fa:32:66:29:78:e7:97:02:90:
                    93:bb:29:c3:46:37:58:48:5d:1f:eb:cc:e7:88:6b:
                    5a:e7:bc:1a:ab:8e:ce:27:ba:f3:2f:f4:77:af:92:
                    50:29:11:65:7a:8b:41:cf:51:5e:3a:65:20:84:8f:
                    f1:f4:56:6f:0a:76:33:3d:96:eb:30:b1:93:2a:0b:
                    65:9c:86:e6:1e:8b:74:87:1d:0b:2c:f1:28:b4:24:
                    c5:0a:99:fb:9e:83:3b:08:fb:c6:df:0d:a7:67:6f:
                    eb:51:9f:f3:35:04:19:13:8b:25:70:8c:6b:30:dc:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D4:45:6D:C0:09:BC:F0:4B:12:0A:75:C7:4E:E2:D8:C9:B3:F2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efd2b718-b62b-396b-bc56-2f2e8d305112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d5:c2:75:02:20:6c:3b:b2:74:38:e2:c2:21:12:94:74:c1:
         80:14:59:45:9c:b8:ce:b3:a5:22:c4:bd:01:49:56:f0:eb:ae:
         a3:2b:6f:31:3a:67:b8:c9:85:41:73:8f:08:3f:66:54:12:16:
         96:c8:6d:a2:ff:fb:4b:6d:a9:f1:13:44:11:d4:8a:37:a6:ec:
         54:fb:10:df:ea:cf:7c:f9:98:41:65:cf:41:b6:ed:00:39:42:
         ee:b5:1d:e0:ac:1b:3c:7d:6c:d9:3e:df:f3:5f:7d:18:92:a7:
         08:fa:41:2f:5c:16:5b:14:12:12:4b:f2:c2:37:3b:62:38:fb:
         32:9b:01:b1:a1:6a:9b:e0:bd:0f:ab:9f:ba:9a:37:15:50:5b:
         1e:04:81:ec:35:52:c7:c7:c5:2e:ec:e0:bf:6a:42:30:c8:ee:
         14:3e:e5:1e:b0:82:fb:bf:28:4d:14:06:c7:e6:a3:d1:d2:05:
         8e:e7:67:31:21:b1:a3:46:fd:bc:9d:b5:3f:6b:f4:b3:c1:da:
         d2:65:e0:4a:93:5d:43:34:52:fd:be:a4:11:b0:50:cd:d8:f4:
         78:8b:b9:9d:08:cb:b0:81:ab:2b:58:29:e1:65:42:7a:1e:40:
         d3:43:52:23:13:e0:aa:61:b5:67:1a:35:66:48:d6:35:46:31:
         50:99:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:00:09 2026 by rpki-client