Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40413e6e-1aff-3ed7-916d-ed407cd19883.roa
File:                     40413e6e-1aff-3ed7-916d-ed407cd19883.roa (raw, json)
Hash identifier:          k0fiinotO4vgoA8tLywQbEpTRV4vlXfazNgWVqVmWLM=
Subject key identifier:   35:72:9D:C0:7B:CD:01:18:C1:3E:CA:F7:78:B7:97:D4:B0:10:81:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CDB023AA9C05E0267073BB000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40413e6e-1aff-3ed7-916d-ed407cd19883.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     396578
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:3a:a9:c0:5e:02:67:07:3b:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=98698b23-4b54-4d99-99d4-c84c9d394109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:15:c3:1c:ca:30:94:3d:98:3c:ec:3e:0b:
                    fe:84:9a:3d:3b:e9:fb:bd:50:36:4e:8e:82:84:91:
                    7d:e9:e4:77:36:69:ec:36:47:13:57:38:4c:da:4c:
                    77:40:6e:7f:d5:dc:2f:a9:17:01:8d:ba:c3:5c:d4:
                    68:a7:7c:e4:98:32:fa:79:b9:e2:44:92:09:a0:60:
                    74:e2:29:81:0f:b3:0d:87:9f:d9:9e:28:48:e1:9c:
                    63:72:ce:f1:1f:0e:bc:03:17:97:b9:f1:b6:de:55:
                    c0:16:d7:45:b5:c3:4d:b0:20:bc:23:ba:4f:28:21:
                    a9:82:f1:ca:41:aa:27:b3:ca:fe:85:8c:42:68:15:
                    dd:35:bf:38:a9:d8:9a:0f:fc:07:90:a6:4d:95:1c:
                    13:82:95:21:fe:8b:04:30:dc:11:7c:24:45:49:24:
                    e2:c9:6f:bc:97:d8:88:3d:74:04:f1:e5:5b:39:e8:
                    92:19:72:32:4c:cc:24:22:c1:90:2a:a9:91:ff:2a:
                    cb:38:1a:2e:e0:46:a0:e6:b3:61:41:d6:ca:f6:4e:
                    d0:a5:ef:b2:47:09:80:d6:8a:36:d2:8c:6d:27:c2:
                    e1:fc:b4:ad:c7:5a:42:ba:10:06:81:89:cb:9e:d8:
                    a1:3e:02:b3:e5:f7:72:54:e1:98:ba:7e:17:4f:78:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:72:9D:C0:7B:CD:01:18:C1:3E:CA:F7:78:B7:97:D4:B0:10:81:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40413e6e-1aff-3ed7-916d-ed407cd19883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:aa:c1:81:8a:5d:2d:ef:5b:0a:f2:a9:17:b2:7f:dd:30:
         c5:7c:5b:2e:6f:58:63:1a:ed:74:60:7a:b0:a3:77:48:37:db:
         4b:05:91:63:ad:ad:4c:42:23:b9:d8:80:1b:62:68:3e:db:52:
         06:eb:61:7d:02:be:ba:1a:93:f6:81:3d:ac:21:de:d0:e2:b7:
         78:49:80:b3:a7:d6:f1:d7:41:18:07:3c:a3:c2:c7:b8:98:68:
         91:de:dd:aa:eb:83:59:2b:01:da:d2:f8:8f:a5:69:0e:a0:0a:
         a5:4d:34:24:47:d4:0c:ef:8c:96:6d:75:2d:8e:5f:47:72:a0:
         b1:21:f2:54:e9:a1:00:b2:98:1e:51:0d:d5:d0:a7:24:c6:d9:
         f0:d0:b3:e8:85:e6:22:4e:9d:1d:1f:c9:01:00:03:bd:89:bc:
         31:fb:fd:ae:9d:e2:6b:a3:2d:48:cb:7f:ff:ac:14:11:cc:96:
         b8:0c:d8:a3:62:4d:68:e3:3f:6e:e4:8a:11:db:9c:f2:8f:8a:
         f6:55:ed:5c:99:bc:e2:41:74:4f:7e:b1:ce:e6:c0:fd:4f:2f:
         d0:86:dc:e5:35:a8:16:19:e8:ca:9f:46:d6:bd:ec:ee:a2:48:
         e9:d1:6c:89:56:b7:71:f6:ae:eb:e0:62:b0:2e:59:c1:12:1e:
         96:80:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:24 2026 by rpki-client