Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25aab43d-1193-3c5e-8e95-176e8092bfd3.roa
File:                     25aab43d-1193-3c5e-8e95-176e8092bfd3.roa (raw, json)
Hash identifier:          KpacuVQikgtAGWuIJf0yAv/wBiDArhRnIOzjJCEqTPY=
Subject key identifier:   DD:76:47:2E:6C:9E:1F:8E:52:57:2B:9E:F2:26:8E:34:12:7E:65:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD99CB7F60885328F9084ABE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25aab43d-1193-3c5e-8e95-176e8092bfd3.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     396578
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:b7:f6:08:85:32:8f:90:84:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=a5c77e2b-fba7-489d-9515-08c4e2708054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:6d:d8:3a:33:26:ff:e3:7f:60:50:26:dd:
                    6b:cd:30:79:12:44:1c:42:26:6f:2a:e3:72:31:af:
                    52:5d:ee:97:4e:64:ad:c5:03:aa:d3:f0:4d:82:b6:
                    8c:8e:a0:d4:c6:f6:c9:33:7b:0e:5b:42:8e:fa:67:
                    c6:84:9a:d0:f0:2e:e3:67:d4:ae:f8:4f:9c:0d:9d:
                    b5:c3:a5:d6:e0:09:11:e6:e0:1b:30:80:b5:38:cb:
                    f2:e0:99:f9:21:2a:92:12:0a:bb:13:66:6a:32:7d:
                    aa:54:16:0b:10:27:51:da:63:3d:a3:36:23:ad:7c:
                    3b:06:4d:8f:a7:36:61:d5:cf:09:ca:b2:f0:10:c8:
                    72:4d:a9:d9:cc:80:83:ff:11:dc:f1:b1:54:cd:ca:
                    6c:50:b6:69:16:1d:e6:84:e1:9a:e9:b7:b9:88:f9:
                    a7:c3:bf:e8:c6:3d:48:f6:cd:16:58:d0:f9:cf:34:
                    72:c1:70:30:fa:32:05:b5:77:40:25:d0:da:88:5e:
                    f1:5e:da:cd:e2:2c:ed:7a:93:6a:79:98:72:1c:ec:
                    a9:f9:94:fa:48:e7:9e:6e:de:e2:7c:bb:d1:c4:ff:
                    8c:39:e9:ba:4a:2e:c8:ef:55:ec:4b:33:f6:72:80:
                    6e:bc:50:ed:db:5c:55:28:c9:c8:18:c1:20:38:d4:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:76:47:2E:6C:9E:1F:8E:52:57:2B:9E:F2:26:8E:34:12:7E:65:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25aab43d-1193-3c5e-8e95-176e8092bfd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7d:6f:9a:e1:49:2d:66:2f:f5:06:b2:d1:61:de:ae:5a:91:
         1e:04:24:e3:56:d4:2e:af:d2:e2:3c:36:48:a9:51:e4:04:61:
         aa:0e:e7:1d:99:4b:28:53:73:aa:bf:fc:c9:a7:a2:3d:d6:93:
         13:74:a2:7d:a5:b0:a6:9a:14:1b:71:91:43:ee:57:d5:bd:0d:
         02:8c:3e:cd:e7:d5:20:12:ec:ae:c1:22:f2:e2:71:7a:af:d0:
         4b:d0:a1:d9:4c:8e:1c:fd:d5:55:a1:84:aa:96:f6:ec:e3:cf:
         9e:17:50:89:32:df:a1:d0:8b:aa:a2:65:ff:d3:69:fc:48:89:
         0a:5b:65:66:58:a8:15:6e:ad:01:c0:02:79:82:8d:53:fe:28:
         31:93:dd:ab:1f:63:10:52:55:49:2e:15:0c:16:6d:57:52:03:
         8b:a9:04:18:d2:dd:20:b9:d3:b7:ff:f3:91:7a:fa:2d:86:c8:
         90:2b:85:d9:c2:dc:dc:2a:3a:94:c0:06:c1:82:5d:c1:98:c1:
         b9:65:c7:ee:5f:87:77:29:05:1e:a4:75:d9:80:d2:81:f8:e4:
         20:2d:28:ae:43:f1:e6:4e:2a:66:84:de:9b:fe:e7:ca:fd:15:
         79:9a:a9:94:3c:e6:cd:45:49:77:7e:32:06:18:63:36:b6:5f:
         8b:18:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:36 2026 by rpki-client