Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcb3fda5-0b1f-3c97-8b93-ca092a1ae5f4.roa
File:                     fcb3fda5-0b1f-3c97-8b93-ca092a1ae5f4.roa (raw, json)
Hash identifier:          pFCvGjnOdvA+2U/EWmHSktz76pqsyQaB1r0QEVXLtdg=
Subject key identifier:   2E:B1:7B:58:FF:00:6D:22:30:C4:A6:2C:46:61:80:C9:9B:56:40:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D19B4E8167D89A99B1C9D7980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcb3fda5-0b1f-3c97-8b93-ca092a1ae5f4.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     397204
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:e8:16:7d:89:a9:9b:1c:9d:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=8ac5fa07-cc06-46a1-9fa2-859616fb02e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:21:8a:a3:83:7c:9d:2d:c7:d3:41:89:33:
                    b8:8a:36:67:d3:62:d4:8f:23:5c:f8:70:0d:c2:13:
                    f0:cc:89:7f:04:06:95:8e:cb:17:33:e9:d3:d2:7f:
                    a8:b8:67:94:a6:ac:48:b3:9f:dd:23:91:f0:f9:80:
                    0c:86:56:a0:01:f1:6e:01:aa:0b:aa:89:11:b9:09:
                    bd:6a:93:7a:de:dc:13:e6:97:45:43:e4:4c:28:2c:
                    d8:3c:47:81:ac:2a:a2:99:b5:3c:63:3a:3c:73:e4:
                    73:a5:7e:33:33:cd:82:20:87:9c:39:32:f3:02:ad:
                    3c:25:40:7b:04:fe:34:28:3b:a2:72:ea:df:dd:3b:
                    ea:29:93:f1:27:d3:56:3c:66:3b:4c:eb:a2:d7:5b:
                    e9:9a:42:ad:4d:31:f8:d9:51:33:dd:ee:33:94:49:
                    a9:94:2d:c7:f1:42:4e:e4:5b:27:ee:20:d2:d2:91:
                    70:4b:bd:c0:2e:01:22:07:b0:cb:5b:25:85:f8:5a:
                    66:9d:fa:ac:30:d4:2c:3e:e6:bc:fe:5b:99:2f:e0:
                    e2:46:75:17:2e:74:59:4f:93:46:7c:fd:b4:90:62:
                    1c:ce:cf:65:ce:ba:ce:61:75:03:9b:02:5a:66:48:
                    11:48:23:90:19:ae:74:46:e3:d9:b3:c4:d5:5d:3c:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B1:7B:58:FF:00:6D:22:30:C4:A6:2C:46:61:80:C9:9B:56:40:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcb3fda5-0b1f-3c97-8b93-ca092a1ae5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:ae:10:1b:e6:b7:5b:e5:d9:cf:b8:aa:c6:6c:6b:ea:a5:
         60:dd:75:ad:f0:90:9f:aa:27:07:ca:b2:93:28:5d:a4:0b:83:
         71:dd:a3:30:7e:d7:ed:43:82:ee:98:47:ed:da:a8:be:a3:f7:
         c0:f5:3c:e8:27:63:b8:6f:fb:3e:c8:81:d1:11:54:ee:e4:c2:
         21:7e:e5:da:3b:a9:4f:7f:aa:d3:97:c9:63:e7:d8:13:f9:1f:
         8f:ff:9a:69:cc:59:3e:aa:9b:fa:a4:49:58:9c:84:12:88:15:
         23:91:c4:a5:2e:5d:50:1a:ac:db:ab:cd:2a:17:6a:24:16:18:
         37:62:ed:4e:49:38:d3:d0:ef:5a:06:24:5e:fd:ce:f1:40:cf:
         41:4e:fe:51:08:ed:4b:db:a9:13:4d:ff:24:91:f3:33:9a:3e:
         b0:44:71:a3:2a:8d:7f:b3:78:62:67:03:ed:76:d2:4e:aa:7a:
         de:14:7a:7e:83:32:97:e7:c6:64:88:f2:37:0c:2f:62:1d:15:
         33:33:7b:21:ed:fd:db:ff:f9:89:d2:92:0c:7b:94:ef:a5:23:
         5a:23:a6:49:d6:2a:08:0b:3a:fb:d1:c1:ee:21:4a:26:24:49:
         a8:8f:10:e7:2a:af:d5:35:c9:03:e2:18:b7:8a:46:1a:d6:d2:
         18:dd:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:12 2026 by rpki-client