Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b7a6785-9b3d-34e8-ac46-1e4a6c66b283.roa
File:                     3b7a6785-9b3d-34e8-ac46-1e4a6c66b283.roa (raw, json)
Hash identifier:          bP3EcLdTRrG4DYa5op+tMn4asbYulnPqc4kWDEiWH+g=
Subject key identifier:   13:0F:7F:27:43:C6:0D:FA:C0:DC:F7:B8:54:F7:63:15:55:5A:32:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFDE793A3EE2D32FCE34E9340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b7a6785-9b3d-34e8-ac46-1e4a6c66b283.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     396596
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:93:a3:ee:2d:32:fc:e3:4e:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=03c4867b-ff0f-44bf-a4a1-5b3a27024e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:13:55:07:63:49:2b:d1:58:fe:60:af:1d:
                    51:9e:3a:4e:01:22:ca:2f:cb:e2:40:26:d3:11:fb:
                    60:f4:40:1b:3a:ae:12:18:22:6b:cc:19:a4:be:3a:
                    6f:76:e1:d1:ba:e2:92:76:0f:80:52:d0:a5:32:a4:
                    93:df:63:16:7f:5f:98:2a:38:85:6e:6e:17:77:a1:
                    aa:e1:c0:e2:df:34:68:2a:f8:df:76:a4:00:7a:fe:
                    95:22:c7:61:43:68:dd:48:68:5e:87:24:f1:cd:3f:
                    a7:9f:64:16:d5:56:28:e9:6e:ef:bb:69:4f:5a:f5:
                    f4:2a:63:11:cb:10:fc:c8:04:89:5c:6a:0e:b6:29:
                    0a:1e:bc:08:c3:dd:a9:d1:72:13:36:2c:66:3f:e9:
                    16:73:b8:9b:c8:40:df:a9:c3:8c:02:e2:4b:20:f2:
                    f0:ff:fb:5d:f8:c8:64:e5:55:1c:2e:94:53:ee:67:
                    4a:2e:2c:90:ae:f7:a6:8a:4e:35:05:4a:81:7a:c6:
                    b9:3c:71:31:c9:b7:13:dd:f8:83:db:3b:29:ba:0c:
                    8d:ac:50:67:b0:06:a6:c9:fb:3b:e1:f6:4f:b6:06:
                    56:df:8b:01:a2:46:18:4f:51:1a:c6:8c:54:d2:8d:
                    cd:48:90:40:b5:6f:3b:37:26:f4:7a:04:4f:36:0b:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:7F:27:43:C6:0D:FA:C0:DC:F7:B8:54:F7:63:15:55:5A:32:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b7a6785-9b3d-34e8-ac46-1e4a6c66b283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d4:2a:9f:ae:a1:99:d8:19:53:78:c8:22:f1:78:0c:7f:3c:
         59:bd:0b:ba:17:ca:b4:4a:5a:a8:30:ed:c2:9d:31:3c:75:97:
         14:01:e1:99:57:34:6f:29:6c:f7:bf:44:ca:de:33:d2:e0:e5:
         f5:15:c3:92:d3:09:b3:48:8a:cd:23:93:98:d2:9c:92:b8:4c:
         17:f1:7d:13:58:6c:0b:3a:45:d9:fd:b8:0a:22:13:5f:d6:39:
         1e:25:57:90:10:75:47:b8:80:19:43:83:1d:f4:f5:bd:36:a6:
         f0:d5:98:0b:a1:86:08:24:95:95:f2:d5:a2:6a:bb:6a:49:d5:
         85:ef:6d:38:53:74:31:73:06:f4:ee:e8:59:f5:60:10:c2:cc:
         da:15:c9:2e:ea:a9:52:74:df:30:87:92:28:d5:87:72:b2:c1:
         bc:c8:8c:d4:56:63:d2:27:16:26:13:64:7d:69:af:dd:7e:4d:
         40:72:62:77:f8:f7:b0:f0:81:cb:f5:dc:9c:20:1e:f4:82:9c:
         3e:fe:15:c7:15:71:54:e7:42:34:ea:b3:5c:46:95:6f:7f:f3:
         36:6a:2b:7c:bc:48:96:ce:8d:80:f5:ba:37:87:f2:ad:b9:bb:
         ef:4a:b8:9d:25:0d:48:0c:4a:d1:42:47:40:4a:40:f9:dd:e6:
         fa:a5:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:54 2026 by rpki-client