Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22cba5a2-40c9-3522-8fd3-b3bc79a68187.roa
File:                     22cba5a2-40c9-3522-8fd3-b3bc79a68187.roa (raw, json)
Hash identifier:          b1QMyIXvmdsx67za4ZQxeCsOwbPMEtGrFcKISiAHEnk=
Subject key identifier:   47:B9:9E:0C:53:53:75:7E:B7:2C:57:84:DA:FB:BC:BA:49:6F:EC:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFE0B2F752EB0C3740916D200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22cba5a2-40c9-3522-8fd3-b3bc79a68187.roa
Signing time:             Thu 26 Feb 2026 15:12:30 +0000
ROA not before:           Thu 26 Feb 2026 15:12:30 +0000
ROA not after:            Wed 27 May 2026 14:12:30 +0000
asID:                     36621
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:0b:2f:75:2e:b0:c3:74:09:16:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 15:12:30 2026 GMT
            Not After : May 27 14:12:30 2026 GMT
        Subject: CN=74326496-1738-4c35-848f-ff3de62d18d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:ed:ea:ae:17:a5:df:93:bc:fa:92:77:50:
                    73:88:59:05:c9:c0:20:64:2b:1c:10:93:e3:f9:e0:
                    3b:a7:d2:94:0e:5e:67:a8:25:45:87:e2:7b:10:6a:
                    4c:ba:0c:df:f4:cb:d1:d7:8f:06:4e:d9:ae:a3:d6:
                    bb:6d:aa:ef:63:b5:93:08:68:cb:cb:13:92:80:65:
                    d0:96:b6:43:15:2d:96:f1:b1:f2:f4:23:c1:a8:9e:
                    ff:76:01:91:7b:9a:d7:7e:3e:2e:55:8b:9d:fc:7e:
                    c6:69:34:e8:fe:56:42:f8:02:cc:2b:b6:3c:8e:c2:
                    89:df:a7:ba:80:42:87:50:02:b0:99:48:63:ef:43:
                    08:12:9c:42:c2:58:b5:5e:fc:18:67:02:0f:7a:3b:
                    ae:05:d4:31:27:ca:90:41:7c:11:21:5c:7f:15:d7:
                    5e:9d:ba:5e:59:60:51:89:b4:05:14:d9:d7:a2:28:
                    24:12:12:aa:92:2f:ef:01:4d:7c:06:5e:d8:32:06:
                    bf:17:52:8c:30:ca:d0:fe:e7:24:9a:f2:69:62:43:
                    10:ca:a1:d4:0a:f3:bd:29:55:b8:65:7a:13:e9:69:
                    2a:66:b9:b9:49:08:b5:e3:a3:4c:a7:5c:86:52:33:
                    82:29:f5:14:cf:3d:1f:d6:c3:17:12:2c:ee:97:b6:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:9E:0C:53:53:75:7E:B7:2C:57:84:DA:FB:BC:BA:49:6F:EC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22cba5a2-40c9-3522-8fd3-b3bc79a68187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:97:21:76:a8:e4:b1:ee:46:eb:cb:dc:5e:ef:b9:4f:70:59:
         6a:d8:fb:23:1d:a2:34:7e:ee:f9:48:14:a8:b9:4a:a0:e7:e1:
         08:5b:7a:ed:00:8f:b0:13:ba:4a:97:ea:b0:6b:d8:19:10:8e:
         37:d9:29:d1:34:05:66:a3:60:7a:ab:4a:01:8e:7e:3b:8f:5e:
         ac:57:13:77:da:66:6f:d1:9b:d5:06:d9:37:cb:09:ef:62:7c:
         2a:dc:ff:8d:cc:d1:a1:d6:1e:62:39:ca:56:ee:5b:f5:fd:35:
         87:67:e4:16:20:53:cd:b8:29:1c:f0:c4:7c:a7:80:2e:5e:32:
         0b:c3:3b:8d:c1:9b:31:14:f6:8e:c9:a0:20:a6:93:8a:e5:5d:
         ce:3b:91:62:0c:4c:5c:be:8b:fe:17:5f:88:06:fe:08:bd:88:
         95:7b:58:7f:43:20:bf:7c:3e:3d:7c:bf:93:fe:ab:3d:4a:e7:
         82:d0:6c:29:a1:49:b4:13:14:c4:54:9b:12:cc:9c:13:24:17:
         fe:8b:40:74:df:d5:56:e7:28:5e:23:0f:6c:52:c9:3e:1c:2b:
         c2:66:db:b3:4f:25:c0:24:b8:01:6c:be:01:5a:25:10:de:2e:
         33:2c:a1:db:6b:c7:53:31:f4:6f:ba:b9:b3:3a:e6:b4:cc:03:
         ac:e3:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:48:10 2026 by rpki-client