Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/469fdd25-9699-32a0-a2da-12087742e6be.roa
File:                     469fdd25-9699-32a0-a2da-12087742e6be.roa (raw, json)
Hash identifier:          2hxX1JXn4gpaRCIt+cGdpMQsaQu4AZ87dqJYr11UZnQ=
Subject key identifier:   72:67:A9:71:41:67:D5:DC:75:2B:B9:13:E0:C9:85:FF:8B:CE:2D:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CDB01FD2A0BC50EC96D77A540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/469fdd25-9699-32a0-a2da-12087742e6be.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     10515
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:fd:2a:0b:c5:0e:c9:6d:77:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=fe4ca22d-cb2b-475e-b6aa-9d05d098438c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:e9:3d:e8:42:01:ca:e1:5d:9d:fc:0a:1e:
                    bb:0d:c6:5d:84:68:ba:e7:84:04:6e:26:df:e9:f3:
                    a5:e1:8a:dd:25:90:a8:43:71:df:c6:60:b3:c5:05:
                    08:af:c7:b0:cf:12:ee:64:d1:44:83:a6:e2:89:63:
                    da:5e:7a:d3:b7:ce:a0:ab:c1:c8:e9:75:9b:d7:44:
                    44:85:e0:cb:40:73:6c:f3:2a:86:eb:67:53:46:da:
                    b9:19:f5:fa:29:91:ef:f2:33:2d:68:f2:25:92:3a:
                    34:98:d0:4e:98:5b:b9:bc:7c:74:9e:ca:44:d0:bb:
                    b7:f8:9d:e2:d1:85:12:86:a4:47:00:bc:ab:73:be:
                    02:92:88:cd:7c:4c:d0:d8:4d:ef:ad:ad:03:95:d4:
                    6e:13:a9:4e:61:b5:5c:59:cf:5c:2f:5a:4a:29:97:
                    27:95:e7:9a:b8:9f:ca:a5:a8:4f:73:0f:cb:74:4e:
                    b3:41:0c:31:4f:ca:7a:16:c7:d8:87:82:be:7d:89:
                    5f:03:b4:41:71:1e:eb:bb:16:c4:f6:d6:38:df:f6:
                    1c:f4:8b:72:e2:47:b7:ae:ab:15:f6:2e:fb:0b:2c:
                    8f:98:7a:38:57:a0:48:f1:4c:d3:18:b8:41:e2:f2:
                    0d:c5:e6:75:89:2a:1b:14:eb:b6:e7:02:20:3d:a0:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:A9:71:41:67:D5:DC:75:2B:B9:13:E0:C9:85:FF:8B:CE:2D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/469fdd25-9699-32a0-a2da-12087742e6be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6c:ed:45:b4:40:f5:c0:f1:1f:b4:83:19:95:a8:58:4f:b0:
         54:7f:ee:94:a5:98:0a:08:ef:ad:cd:bc:e3:72:76:7c:b0:6a:
         ca:cb:86:95:9a:5f:a5:2e:2e:f1:6b:47:11:95:b4:74:b5:aa:
         7f:eb:38:f2:38:cf:69:a9:9a:12:c4:fa:03:c4:74:a1:d8:6f:
         f2:33:66:90:87:8c:3a:e9:79:3b:e3:f7:3c:ba:f5:92:2c:49:
         5c:7e:8e:91:0f:d3:6e:67:67:56:29:fa:36:d0:10:11:89:4e:
         e1:ed:52:16:29:69:3a:00:71:ab:58:de:a2:6a:51:57:a3:ce:
         72:c6:a4:e9:38:f7:98:5d:c6:6f:35:d4:20:44:19:6a:56:ff:
         60:90:2c:54:45:62:94:94:6d:e5:9e:c6:ec:44:4f:c6:29:a9:
         89:08:5e:0a:d7:74:25:fc:cd:a0:db:ed:fb:9a:41:b8:e7:ad:
         3c:5b:96:83:0c:29:e5:b6:63:7c:d5:a5:96:73:53:5a:93:4b:
         b6:56:45:1c:15:6b:e0:23:96:99:0e:a1:39:0d:40:e5:82:0f:
         df:c7:8e:8d:82:39:30:62:79:8b:8b:4b:75:89:67:18:04:b7:
         74:ce:f5:be:15:e8:46:17:cf:07:84:47:c8:42:7f:52:46:12:
         e7:b0:ef:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:22 2026 by rpki-client