Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37712525-4ef4-3012-84d5-b588a4f79b0b.roa
File:                     37712525-4ef4-3012-84d5-b588a4f79b0b.roa (raw, json)
Hash identifier:          ER3/GXqdOpnAjoBIqN/MtRiewv59I2hlBNXwFsLw7G0=
Subject key identifier:   A1:5C:5A:65:B8:E9:6A:55:0E:7A:93:AE:77:77:E0:20:13:09:BA:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037D58AA5487739135A4EF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37712525-4ef4-3012-84d5-b588a4f79b0b.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396591
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:58:aa:54:87:73:91:35:a4:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=76d55c0d-bd58-46eb-96a8-3a3fae3215fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:f4:1c:8a:9c:0b:ed:b1:56:78:a2:67:6c:
                    74:32:8b:f2:5f:7b:94:ca:76:25:e2:17:1a:74:28:
                    54:67:e4:d6:24:86:51:63:8d:56:0b:58:94:fd:9a:
                    28:db:d1:5d:58:b1:e3:e1:ca:29:b3:9c:da:e9:10:
                    73:e9:fd:28:32:d3:ee:df:1f:35:a5:69:76:45:92:
                    ff:2a:c5:c3:5a:a2:bb:77:37:a7:13:9d:bf:fb:17:
                    04:ed:53:7b:3a:d3:b5:6d:1f:5a:35:5c:36:c3:4c:
                    e1:d4:ae:c7:ce:e1:e5:7a:97:11:0d:27:55:d4:f7:
                    8e:0b:5a:2d:82:de:2c:b7:ef:9b:65:08:62:ac:66:
                    21:00:00:28:0f:c8:2e:e2:67:1a:a9:55:04:71:7a:
                    24:ba:c7:0c:b7:08:0c:ab:b5:43:7a:df:cc:89:e8:
                    37:fc:8d:3d:4c:ff:b7:a9:7a:c4:c4:fb:d3:ae:ac:
                    b0:08:11:89:ef:dc:72:95:19:61:04:59:a7:58:00:
                    29:72:d9:53:60:5c:e9:c2:b2:55:65:d7:67:49:8c:
                    5d:3b:28:7d:6d:99:0a:5b:5d:dc:47:2d:1c:a9:23:
                    19:01:45:0f:c2:00:10:02:b7:f1:8a:49:9e:8b:f8:
                    a0:fd:00:20:f4:aa:6d:97:e9:9f:35:b0:64:a4:05:
                    31:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5C:5A:65:B8:E9:6A:55:0E:7A:93:AE:77:77:E0:20:13:09:BA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37712525-4ef4-3012-84d5-b588a4f79b0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:97:4c:8d:3e:96:a5:cd:02:f8:a7:b7:9f:7c:c0:e6:ad:
         22:3c:dc:32:5e:f6:b4:09:5b:e2:b9:7c:89:f3:6d:b7:22:29:
         13:6f:75:a8:3e:44:94:fe:93:59:77:63:d2:dc:04:99:02:87:
         59:7d:79:90:39:45:d8:81:4b:6a:38:8f:50:96:50:67:7a:ab:
         ce:e0:15:93:b8:f0:13:79:0e:a7:80:dd:01:a4:01:fc:e8:2e:
         f3:13:ff:13:62:a1:63:73:0c:aa:89:4f:54:94:26:8a:2a:60:
         f9:ed:67:96:06:91:98:d4:18:9f:ea:92:ff:3e:6a:d1:f3:22:
         e3:5b:f2:07:70:2e:6b:78:23:86:37:5b:c2:bb:cb:60:cb:c3:
         6d:0f:71:60:19:1d:68:e9:ed:02:96:5c:fa:26:9a:0f:db:12:
         67:38:53:f2:85:9c:68:3b:7c:c4:4b:ef:f1:83:a8:99:07:24:
         7b:1a:96:34:01:5b:0c:89:94:04:3c:09:c4:d4:34:e6:6b:af:
         04:2a:9f:b7:9c:c6:54:be:61:78:74:0c:d5:bc:db:99:ae:0b:
         a2:36:d7:b9:f0:2e:94:9f:ab:e7:a0:fb:cf:4c:f4:ee:c7:5f:
         2d:09:25:a9:ef:3f:d0:b5:4c:0b:ea:87:32:d2:6a:7d:5c:94:
         26:a0:a3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:55 2026 by rpki-client