Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06212b88-f2a6-3536-be1f-77705f282419.roa
File:                     06212b88-f2a6-3536-be1f-77705f282419.roa (raw, json)
Hash identifier:          urqDI/zDsuSi8j7UHSqmT2Mgv1P1JEXXAOQ/krouY0E=
Subject key identifier:   5B:20:29:AE:B4:8D:01:18:27:BD:A2:57:16:DC:AE:12:EB:3F:20:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF878E9649D247A9556180C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06212b88-f2a6-3536-be1f-77705f282419.roa
Signing time:             Tue 24 Feb 2026 15:18:44 +0000
ROA not before:           Tue 24 Feb 2026 15:18:44 +0000
ROA not after:            Mon 25 May 2026 14:18:44 +0000
asID:                     396581
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:78:e9:64:9d:24:7a:95:56:18:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 24 15:18:44 2026 GMT
            Not After : May 25 14:18:44 2026 GMT
        Subject: CN=e8501a26-8f34-4a60-bdf3-b6c08297ac6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:59:2f:92:a8:0e:82:ea:da:8d:e3:ac:30:
                    59:24:47:0f:0c:6a:36:0b:e1:92:95:da:b2:8a:a8:
                    d7:f5:bd:6e:30:c5:dc:7d:89:f6:32:2c:7c:a5:70:
                    01:aa:36:c3:8f:57:90:77:34:d9:40:ff:c2:21:11:
                    4e:1a:bd:60:61:0a:5d:65:a4:20:d8:f1:74:ef:62:
                    2a:01:2e:3e:d0:0f:c8:be:37:1b:b2:cd:2c:a6:cd:
                    34:cb:e9:47:8e:3b:25:05:9e:f3:d2:11:57:36:5b:
                    50:50:61:c2:d7:cf:8e:f3:18:80:b5:d6:b2:2e:f9:
                    cf:07:0e:65:7c:e1:d5:d1:fb:08:1f:f9:a5:1d:77:
                    11:67:37:88:85:c5:c1:11:02:bd:0c:ac:7d:35:08:
                    56:13:37:21:a7:aa:95:32:ba:9e:02:58:71:26:e4:
                    bd:51:aa:1c:38:1d:dd:a9:51:81:fa:84:f3:0b:dd:
                    8e:83:6c:6b:72:18:be:bb:4d:60:62:5b:2f:3b:e4:
                    60:0f:29:ad:f2:90:94:5d:aa:7b:0c:82:c5:a7:b7:
                    ba:ff:4b:04:80:c4:ca:b9:32:d4:a9:47:8a:c9:87:
                    09:c7:a3:17:1d:65:76:6b:25:4e:0c:03:21:22:cd:
                    cb:2b:41:65:8e:14:e8:b1:9c:7f:f9:57:36:de:59:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:20:29:AE:B4:8D:01:18:27:BD:A2:57:16:DC:AE:12:EB:3F:20:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06212b88-f2a6-3536-be1f-77705f282419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cd:43:ce:72:11:b8:f2:ad:ed:8b:ca:6a:ff:9d:b0:28:7d:
         af:a7:d9:cf:f8:19:5d:33:8f:4e:14:f2:d2:c0:5f:b0:48:4b:
         00:85:28:0b:70:50:2e:fd:c6:db:2e:30:e5:6e:ac:45:a1:8f:
         b0:e8:88:86:b7:f1:dd:c8:56:d1:31:74:76:42:17:b1:85:a7:
         56:4e:e9:59:a9:df:22:7f:86:8e:a0:ad:d3:51:f8:49:ff:9d:
         14:f7:90:ec:99:07:0c:7e:48:d6:68:5e:2a:f2:5d:b7:e8:69:
         15:67:90:a5:e0:c3:4e:bb:48:9c:d5:5a:20:2d:66:41:36:6f:
         cd:5e:58:21:6f:ab:95:ef:8f:73:2c:e6:8e:57:ea:c3:a2:ee:
         b1:8e:80:85:6a:6c:40:42:04:a3:e7:e1:35:2b:c4:23:a3:48:
         aa:4f:af:65:8a:d7:0e:f8:2f:0a:5b:ce:1a:d4:db:c5:26:8f:
         08:5f:eb:4e:a5:76:34:44:98:e8:9d:7f:cb:5e:62:07:04:66:
         98:d6:ed:42:98:db:ba:68:20:61:b8:c7:6e:fb:3f:b3:a0:de:
         c2:56:4a:e4:c6:86:fb:9d:49:9d:cf:6c:5a:13:1e:51:0c:aa:
         84:d3:68:4f:aa:6f:ce:53:02:ef:4b:4e:75:53:ab:2d:60:92:
         47:f8:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:45:08 2026 by rpki-client