Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36152edd-ece6-3051-89b7-8d0471d402ab.roa
File:                     36152edd-ece6-3051-89b7-8d0471d402ab.roa (raw, json)
Hash identifier:          IUTcORq6kRUOrb2L24HCmKkC0WmwtGqttfwJ/c+FO2M=
Subject key identifier:   E9:79:BB:51:25:84:55:F7:E5:8A:F8:0C:08:BA:96:25:CA:AB:07:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD99CEEC2073FE6F8E31CED80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36152edd-ece6-3051-89b7-8d0471d402ab.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     396576
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ee:c2:07:3f:e6:f8:e3:1c:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=ab7bf1bc-aff1-4e46-8c93-f472e6303671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:2f:a5:75:d9:d9:1b:ab:e9:47:0c:a3:7e:
                    77:d8:1b:9c:ff:42:ef:6c:ed:45:77:2f:ab:3c:6b:
                    1a:7c:90:f4:0b:c3:11:d0:80:a9:1c:6d:6f:11:dd:
                    fa:71:0e:c5:2f:37:f2:ac:93:47:d3:93:a4:43:30:
                    8e:f6:a8:80:8f:c1:36:61:4f:a1:4d:d5:95:f3:12:
                    ea:e3:ba:5f:b0:8a:93:11:5c:88:c9:a3:e0:d6:c4:
                    67:fe:77:ab:06:05:54:cf:06:a0:ea:e8:49:35:99:
                    d0:7d:01:52:78:12:e3:11:be:e9:7d:56:09:75:dc:
                    ed:15:e2:ad:d6:af:b3:94:ef:4a:3d:89:2a:e4:7b:
                    c1:61:3c:a9:fc:d4:0b:e1:74:5e:25:d9:f3:c3:f4:
                    86:be:e6:c7:5f:15:63:6f:e7:14:4a:42:17:ba:09:
                    9d:4a:fa:9b:e3:1a:9b:1b:8f:ac:4f:42:94:40:84:
                    18:df:85:39:62:d6:dc:d3:98:97:37:87:45:52:88:
                    f7:87:e2:d7:0a:94:54:dc:e5:62:f1:c6:0d:b6:ce:
                    08:44:ec:f7:f2:3e:79:48:d1:ad:b9:e8:02:ce:ca:
                    21:70:0a:31:f3:7f:e4:7d:90:00:09:f3:49:23:0b:
                    09:0f:1e:44:ce:ba:ec:ed:8a:24:16:3a:16:d9:99:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:79:BB:51:25:84:55:F7:E5:8A:F8:0C:08:BA:96:25:CA:AB:07:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36152edd-ece6-3051-89b7-8d0471d402ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:da:7e:33:2d:7b:7e:4a:ef:3f:52:34:7e:6c:95:8a:74:14:
         e3:12:3c:a1:99:91:3f:25:80:58:c9:aa:e5:4a:ef:e5:35:06:
         92:ce:54:62:55:2d:8a:63:37:a3:73:68:b5:7d:b7:a6:5c:80:
         86:ed:e1:93:22:d4:33:99:a4:b6:47:48:d3:e2:57:05:30:25:
         86:a7:40:16:f6:a2:75:87:a1:5a:58:eb:da:90:c3:ba:61:a3:
         a6:ca:97:60:2d:06:dc:e3:a4:a4:e2:0e:3b:fd:57:bb:0a:5a:
         7c:57:d1:9a:f4:63:d2:2f:40:ac:94:35:ba:56:d0:b4:11:5f:
         d3:4d:ab:d7:02:14:35:f9:e5:e2:04:29:58:ac:28:98:10:47:
         82:2a:be:63:59:1a:b0:ab:7d:00:d6:f9:60:3a:f5:fa:55:e3:
         ad:6b:30:31:c1:f4:d3:2f:75:c2:47:51:9c:9c:90:95:27:27:
         c3:2b:bb:4e:b2:e9:d4:bf:07:06:56:f1:aa:34:5a:6a:50:92:
         85:e6:69:63:44:08:fa:ee:19:e2:43:da:4a:09:73:c2:18:51:
         cb:47:32:81:21:df:97:79:42:6b:90:1a:7a:08:74:3d:b1:e2:
         37:1b:b9:4a:d4:f2:7f:40:f0:68:06:8a:8c:9f:44:a3:f4:37:
         f3:15:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:51 2026 by rpki-client