Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa
File:                     4dd18853-9849-3b14-af0e-6f802d6338d4.roa (raw, json)
Hash identifier:          JFA923Cer2Pg74MQOVGJ9RKzS147XLsq/IdvQZyzWX8=
Subject key identifier:   FA:03:AD:B7:6F:D9:A0:1A:DC:E2:D0:52:40:66:33:9D:E8:72:B3:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFDEAA4C75206484CBAC30700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     396587
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:a4:c7:52:06:48:4c:ba:c3:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=c59fd30b-21bc-4bb3-8cc3-1e787b4c68e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:c2:84:3e:64:42:41:52:14:24:52:47:c1:
                    ac:71:1f:fb:91:6b:c5:37:01:d5:8f:db:dd:14:4b:
                    c8:99:78:08:11:53:62:2f:f3:ab:1b:df:ee:d2:be:
                    21:68:6e:23:21:6c:9f:8e:1a:1f:9b:79:49:d1:fd:
                    ff:91:43:ca:b2:2e:b0:57:f6:06:f5:74:16:97:15:
                    2c:d3:3b:87:ea:40:9e:4c:f9:86:f8:e1:c8:be:11:
                    8e:9f:61:aa:f6:71:59:24:ce:e0:9d:39:11:32:b3:
                    63:37:80:43:62:a9:11:cd:d1:c0:3f:f4:e7:a8:27:
                    38:4d:5e:ce:ff:8c:2e:d5:32:c3:c1:94:fd:86:66:
                    f7:93:09:9c:8d:a7:47:e9:08:24:97:55:94:1b:d7:
                    8e:1a:fe:18:dc:c5:2e:6c:ce:ce:3f:a1:86:59:d8:
                    b6:9a:c8:c5:c1:83:92:be:3e:0b:7b:2d:ae:eb:62:
                    90:0d:9e:a9:79:17:a9:ad:d7:94:b3:10:e3:df:6e:
                    d6:b5:4d:ae:8d:5f:05:ca:0c:e0:a3:c9:8a:05:6c:
                    95:54:7e:b5:98:f5:f2:77:9f:bc:82:c5:9c:35:42:
                    c0:8a:c1:c3:70:87:52:38:b5:86:30:53:8d:32:ad:
                    d9:20:40:74:cc:db:05:7c:08:c0:96:b3:af:c8:3d:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:AD:B7:6F:D9:A0:1A:DC:E2:D0:52:40:66:33:9D:E8:72:B3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:77:af:29:9c:66:23:05:43:6f:30:83:4a:2f:ba:21:19:05:
         3b:c9:44:38:41:08:31:e5:48:1e:63:79:fb:3a:6c:ab:a7:32:
         c9:9b:c8:a1:b3:e2:9f:93:4c:46:cd:3c:37:39:f6:fa:bf:6e:
         04:95:00:a9:14:3d:8f:be:ce:e1:94:65:64:eb:2b:3e:76:76:
         cf:15:d7:a4:73:55:03:cb:a1:4a:c6:0a:63:5a:df:97:0e:ca:
         7b:f7:4a:16:5c:aa:3a:0f:b7:ca:e8:bb:e6:cc:86:8d:10:cc:
         97:39:a5:47:5c:61:b8:47:01:5a:4c:37:21:0d:09:e7:7d:53:
         4d:d4:2c:d3:57:0a:ce:1b:76:68:9d:ee:58:fd:72:0f:31:04:
         a6:ca:cf:91:07:63:8e:16:16:70:4b:f6:ff:ce:b4:3d:68:4f:
         66:d5:59:da:03:6c:cb:d2:a9:46:a0:b7:a9:38:c5:ee:50:a9:
         40:0f:45:42:82:35:cc:fb:e9:a2:35:d4:99:97:6d:06:f9:af:
         42:dd:aa:97:00:28:52:4c:90:6a:1c:16:11:51:8e:b0:9d:4a:
         13:d7:b3:49:e1:9f:10:19:a8:1c:4d:e6:a8:65:aa:1b:6d:cf:
         30:ce:a3:31:7a:5e:ca:1f:83:82:ae:dd:43:b0:30:fa:e3:8e:
         74:36:bc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:15 2026 by rpki-client