Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3af50f-f55e-37c2-b850-6779e5f3997d.roa
File:                     3a3af50f-f55e-37c2-b850-6779e5f3997d.roa (raw, json)
Hash identifier:          f9GYnSBvMqna9+E6EToCXDDAP5oHWSAQ5/w4qOj5Q84=
Subject key identifier:   9C:CE:12:30:3A:8B:2B:93:77:CA:38:3C:3E:62:F3:06:5D:69:22:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CED27BB2CACA6E9A2F8985100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3af50f-f55e-37c2-b850-6779e5f3997d.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     397196
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:bb:2c:ac:a6:e9:a2:f8:98:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=bd8b7825-c7f4-4dfc-9f75-0a7f096d509c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:1c:8f:0e:4a:a1:6f:0f:ba:2f:c8:40:18:
                    c6:d4:21:f1:c8:a2:b3:1d:c6:12:fe:06:97:05:fe:
                    7b:22:95:0f:a5:9d:83:d6:6c:4b:37:c7:a4:15:a6:
                    01:e2:46:f3:25:b3:13:eb:79:67:67:50:d1:5d:03:
                    a3:78:cd:5a:4c:3f:c5:d1:29:6a:c6:ce:3d:fd:91:
                    13:df:9a:21:bc:32:02:da:95:4d:ac:b0:82:05:14:
                    ec:c7:d2:8d:e3:30:ad:c5:39:b3:68:ba:58:7f:b9:
                    a3:fb:ba:19:dc:5b:7d:3f:d8:71:5a:ad:f3:a1:c6:
                    80:1f:5d:22:de:8c:42:23:ec:a8:56:7d:cf:36:b7:
                    68:ff:81:0e:7c:cd:11:c6:fc:9c:fe:f7:c7:49:30:
                    1d:2a:a0:f7:cd:3f:d4:ea:5f:01:a8:85:62:9f:a2:
                    17:4d:58:5d:e5:cb:46:b3:ff:28:e7:4e:af:b2:3f:
                    64:6d:ff:78:d9:99:f8:d9:cb:34:49:a9:a3:da:66:
                    15:73:79:3d:5e:97:12:82:4f:1e:f1:5d:ea:23:ec:
                    0c:c4:9c:d8:ef:3b:c4:f7:eb:69:79:36:1a:39:1d:
                    a3:37:95:c2:e8:09:36:f4:8e:eb:21:8f:56:2c:85:
                    c9:f7:b5:50:ce:24:05:df:51:73:82:f9:27:14:76:
                    af:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CE:12:30:3A:8B:2B:93:77:CA:38:3C:3E:62:F3:06:5D:69:22:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3af50f-f55e-37c2-b850-6779e5f3997d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:12:32:78:e8:a4:23:89:85:25:84:ea:72:82:b6:dd:67:26:
         02:06:2a:9d:c8:8e:4a:1b:34:79:8d:e5:08:56:9a:60:ab:1a:
         ad:2e:a3:04:a9:59:04:08:0f:63:a1:a9:3a:a4:2e:05:3d:f1:
         aa:18:66:cf:6a:8a:62:2d:b2:ea:71:23:db:31:37:f4:3e:6c:
         e9:d4:c0:3c:4d:ec:16:88:39:32:c9:50:08:41:07:b0:3a:44:
         42:a2:af:2b:07:ff:c1:45:99:56:dc:67:cd:ad:bf:14:c3:e4:
         fd:2d:ed:35:1a:7d:c2:1e:89:3f:7c:31:1d:b3:61:ca:b1:76:
         8f:bd:c4:30:82:8a:1d:98:40:e2:3d:9f:4b:2d:0f:ae:40:6e:
         2c:45:3f:4f:90:55:28:84:e5:9f:a4:50:77:0a:76:c4:ec:55:
         49:b8:7f:72:d1:d4:d3:61:24:1d:ac:ac:2d:3e:39:c8:85:6e:
         c4:9b:d6:ae:6a:2c:dd:64:de:ac:e9:36:5a:fb:08:16:ab:c1:
         ec:e6:00:9f:22:ee:4c:21:8b:bd:e8:22:88:d5:cf:4f:b1:e0:
         3b:54:af:41:83:b3:f0:7a:b9:c6:de:47:96:49:d8:7c:ee:ed:
         07:4c:a1:00:cf:a4:fb:58:70:c5:95:54:72:be:3e:8c:01:be:
         3a:f2:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:28 2026 by rpki-client