Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac76d2f-0ec9-3f56-9119-e877d5fa9949.roa
File:                     3ac76d2f-0ec9-3f56-9119-e877d5fa9949.roa (raw, json)
Hash identifier:          zcwYbZpyjPDeI9yc2HV/iYi0QQ+aaNzSfTAsGwWhhQs=
Subject key identifier:   13:CE:93:5C:16:A0:25:CC:94:F2:A7:24:1B:FC:1E:84:7C:48:C5:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B26725D0C5D5F096108400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac76d2f-0ec9-3f56-9119-e877d5fa9949.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     396571
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:67:25:d0:c5:d5:f0:96:10:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=64f01cf1-9be8-4e65-97de-262b4d169951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:db:ca:50:e1:56:d0:7a:ef:71:28:bf:51:
                    0c:2c:48:00:d9:cc:a3:30:76:c2:66:7c:bf:73:0e:
                    36:9a:7e:01:56:7b:83:c4:6f:e0:c4:7f:14:df:f9:
                    d8:9e:d3:3e:e8:c3:2e:de:41:42:9d:b7:8c:7b:66:
                    72:4c:7a:aa:98:73:48:07:a8:31:79:b7:f3:3f:fb:
                    63:c2:ec:2e:10:14:27:ce:0d:b0:1b:08:b1:9c:9a:
                    26:fa:66:e2:85:d6:65:15:95:6b:b3:d0:35:10:06:
                    a4:3f:5b:45:3d:9b:52:9d:7a:e5:a8:b0:61:55:dc:
                    ae:1f:ae:cb:79:77:3a:2a:bc:0e:e8:f7:4c:e4:98:
                    d6:60:cb:1b:e5:fc:47:4e:9c:c6:c8:65:20:e4:aa:
                    94:1a:d0:93:42:71:31:4e:ac:d9:8a:bb:ef:5b:fa:
                    13:a3:b5:b3:7d:ce:64:5d:c6:6d:64:8e:35:98:d1:
                    49:d9:b3:30:3d:d2:71:1e:7b:53:a1:7a:8a:14:80:
                    eb:64:21:b8:9b:f4:c0:e5:40:5c:87:7e:30:54:e7:
                    2b:3b:ab:a9:90:11:88:4f:a1:ee:43:c8:b3:01:bb:
                    4a:ee:5c:b4:cb:c4:83:e0:af:d2:d6:d7:cd:1b:0c:
                    d2:23:64:bc:0b:54:f7:6b:2e:6c:d9:4e:09:e8:5b:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CE:93:5C:16:A0:25:CC:94:F2:A7:24:1B:FC:1E:84:7C:48:C5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac76d2f-0ec9-3f56-9119-e877d5fa9949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:80:9e:a7:e3:e5:e2:52:9e:c2:a8:f0:98:ff:72:8f:73:af:
         db:da:f4:5a:dc:d3:f7:ac:f5:c9:51:a0:9e:7c:52:c9:83:1f:
         d3:5c:0d:b5:60:e4:13:26:dc:34:58:b1:bf:97:06:71:c1:83:
         68:b8:49:6d:03:c5:b5:bd:05:a5:3d:9b:e8:22:bc:db:51:38:
         bd:25:b6:5f:16:05:fa:85:19:d8:46:51:8e:b4:35:f9:89:4e:
         48:40:c2:e8:f0:6e:0e:11:6c:fd:46:0a:06:b3:5f:f4:08:80:
         1f:a6:3d:9c:5f:bb:d2:2d:23:bf:b7:a3:65:9b:d2:6e:76:aa:
         c0:41:24:e9:e3:ce:6e:ad:bc:f7:3a:6e:9f:97:73:20:38:99:
         b4:fe:7b:ff:a6:58:e3:95:61:53:91:fc:5e:72:76:d3:2e:df:
         ce:74:b6:64:85:2a:b7:ba:1b:ee:79:ff:ee:5e:8a:d9:ff:fd:
         53:39:f1:4e:ae:48:bb:1d:97:e5:af:2f:24:cd:54:b4:db:d5:
         ef:d5:80:6f:77:af:ba:18:4b:45:01:d8:df:46:b7:2c:36:7f:
         14:8d:5a:39:0a:70:48:f6:78:b2:a6:e7:61:16:91:8b:87:3b:
         83:09:b7:19:b1:ac:87:2b:39:1d:12:b5:31:39:38:85:81:4e:
         c0:23:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:01 2026 by rpki-client