Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3e5840-e34b-3a03-8261-b7b6970e759c.roa
File:                     0a3e5840-e34b-3a03-8261-b7b6970e759c.roa (raw, json)
Hash identifier:          ZNEiHHVJyHsvskkpSDi+uJnKvebn448OVb30BLGcW/M=
Subject key identifier:   02:D2:43:5E:CB:0B:4C:06:AD:A5:86:0B:C1:6A:30:8B:63:F9:7D:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CDB023DB886B76E427C715500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3e5840-e34b-3a03-8261-b7b6970e759c.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     397202
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:3d:b8:86:b7:6e:42:7c:71:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=0091b279-c3de-4489-904b-619bc76fe4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:35:dd:06:a2:b0:6d:bb:1e:7f:9a:bd:fc:
                    d6:b0:1c:76:1a:52:1c:bd:49:41:ec:75:a8:5f:cf:
                    f8:bb:db:2d:ae:2c:36:3f:c5:9f:3d:4a:23:f7:b4:
                    5f:cc:26:f6:27:8f:bb:30:1b:7b:c4:b8:4a:3f:4a:
                    f7:26:4e:87:e3:41:9b:1d:80:b6:88:74:c3:1f:be:
                    95:31:e2:31:9c:cc:61:25:f7:ee:27:84:d7:60:b2:
                    10:d4:cc:35:a3:ae:d5:e8:70:49:30:6e:8f:93:b2:
                    49:f6:55:a0:93:8b:67:68:69:f0:4f:ed:ab:f3:aa:
                    ba:b9:70:23:be:4d:28:b5:00:7b:5d:ec:2b:54:36:
                    9c:86:3e:38:4f:0e:95:6c:03:5b:86:2b:6f:25:af:
                    45:66:9d:24:ee:16:b5:65:c3:7f:dd:07:7f:4b:10:
                    13:6d:e6:e6:3c:d3:d1:af:9c:ce:8e:12:f2:6c:7a:
                    af:5d:e1:ca:eb:44:b3:c1:3c:be:b0:d1:1d:67:b2:
                    71:6e:b4:85:05:bc:a9:68:88:06:50:6c:37:3a:ea:
                    b1:79:77:f2:f2:f7:dd:38:27:d1:af:f5:ae:7e:73:
                    d7:75:07:21:41:50:e5:44:61:0e:59:80:e8:2e:b7:
                    f5:41:fe:1f:86:63:52:47:d8:13:a4:24:c0:32:57:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:43:5E:CB:0B:4C:06:AD:A5:86:0B:C1:6A:30:8B:63:F9:7D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3e5840-e34b-3a03-8261-b7b6970e759c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:3b:aa:17:f0:98:45:f8:14:a5:f9:d6:fc:1e:19:3e:2a:
         5c:13:ca:20:3a:ca:67:1a:06:66:c7:a5:48:77:37:20:82:d1:
         07:4d:62:6b:e2:a5:37:f5:c0:10:81:91:b3:47:9b:f6:68:f8:
         1b:e7:da:90:2b:24:ea:09:5c:6f:54:f9:57:0c:28:b7:f3:c8:
         c4:0f:57:4d:28:9d:43:ed:1f:a0:de:95:1d:13:a8:1d:3f:b2:
         65:98:a9:f9:92:02:d9:5a:75:e3:ce:58:00:03:47:79:ad:60:
         6d:d9:93:a5:9d:76:49:90:2c:e0:7d:ef:05:e8:5f:99:e5:5d:
         a4:a5:63:6e:3b:65:cb:32:85:0c:75:33:e6:c3:b2:61:9e:b1:
         a5:86:26:13:ab:0f:03:9d:ab:5c:10:f5:6c:1f:23:35:90:fc:
         08:3a:2d:78:09:d3:ab:29:94:e9:3e:0c:25:4a:46:4e:f0:a3:
         b6:51:45:55:0b:df:22:0b:d4:e5:9e:5c:01:0d:2f:0a:81:7e:
         05:9c:1c:01:99:89:0e:63:48:21:4e:30:78:4a:ba:3b:47:0d:
         15:e3:9a:f1:23:a1:e8:56:de:46:ad:be:a2:d6:c0:0c:6d:ad:
         3a:73:64:ef:64:e1:79:52:9c:59:b5:a3:54:32:19:4e:f5:54:
         94:ae:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:22 2026 by rpki-client