Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52ee5ba0-d178-3fdf-936e-13b17c5c6967.roa
File:                     52ee5ba0-d178-3fdf-936e-13b17c5c6967.roa (raw, json)
Hash identifier:          VmsQnasxoUz0bhxFil4h49j7w1fc0ngcaT0c7prBOr4=
Subject key identifier:   21:04:FB:B7:FE:93:AB:C5:08:98:D6:25:68:98:60:2E:F1:20:0B:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFDEAA87A5A30CA2BBC1A6000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52ee5ba0-d178-3fdf-936e-13b17c5c6967.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     397203
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:a8:7a:5a:30:ca:2b:bc:1a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=2bd75b94-8979-4516-8260-86ddd1964fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:37:d1:c5:76:71:2e:68:9a:d8:2a:22:e2:
                    01:b1:0b:bb:34:6b:90:ac:95:6b:e0:06:e8:e9:64:
                    74:32:26:35:73:55:f7:3c:d2:71:0c:3e:e4:aa:96:
                    76:d0:e6:d5:0b:4b:fd:9b:35:51:e5:fd:fc:7e:30:
                    74:6b:86:df:24:ef:b3:25:af:06:a0:14:b5:6a:56:
                    01:a3:a0:e5:fd:87:e4:0b:8b:8f:b1:bb:52:ea:5c:
                    ef:c8:79:c5:4c:1e:ac:2d:e7:e0:d9:5a:6c:ff:53:
                    82:e4:24:af:d7:67:c8:79:9b:20:a0:59:94:67:38:
                    f1:52:79:cc:f3:a3:20:bc:51:83:ee:3e:79:82:0b:
                    23:9c:fe:84:8a:e9:6a:69:a2:6d:6a:62:ae:6f:7f:
                    a0:f4:33:46:10:37:b4:d8:fb:57:38:19:90:88:18:
                    47:09:56:77:ba:88:8a:87:12:8e:f1:5a:b4:73:31:
                    c8:fe:f0:85:94:a3:3a:e8:c5:58:a4:29:44:73:c7:
                    e1:3a:28:07:1b:c9:69:bd:15:14:28:c4:85:ec:6f:
                    a1:36:5f:5d:ec:f4:ff:8a:7d:9a:fd:f8:eb:b5:ff:
                    dc:fb:5b:6c:9c:5a:0c:2d:98:fe:72:e0:96:e8:f5:
                    ed:c1:93:69:a8:e9:43:c1:a9:79:26:0a:3d:58:94:
                    24:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:04:FB:B7:FE:93:AB:C5:08:98:D6:25:68:98:60:2E:F1:20:0B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52ee5ba0-d178-3fdf-936e-13b17c5c6967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:78:f9:71:01:b9:ed:4c:d7:44:8c:e1:2e:b9:3f:00:db:e6:
         b0:df:ea:29:81:a4:50:fd:17:e5:20:11:4a:15:23:9e:be:7e:
         1f:d6:65:e0:07:b6:02:70:54:72:bb:0f:94:41:0d:2e:33:81:
         a5:27:0f:fd:2c:6a:b5:b2:89:1c:d4:d5:ed:40:cf:15:19:91:
         3d:ea:0c:93:62:81:55:0a:a8:f3:85:8f:d9:48:d2:6c:7f:ea:
         7f:2e:6e:92:0c:f9:c4:12:23:37:ce:6c:37:cd:ae:ad:1c:3f:
         4b:f9:e0:cf:02:29:2a:03:f2:93:ee:f1:f2:b5:98:69:56:93:
         2b:55:88:b8:55:bf:10:b4:0b:78:34:c0:02:e7:bb:2b:56:4f:
         a1:9e:e2:26:85:6f:92:cb:d4:90:a9:b3:f3:5f:d0:a0:26:5e:
         c6:9b:cb:1a:96:d3:3b:c3:3b:5c:17:4b:0e:4c:5a:be:b0:0b:
         0c:16:c6:1b:c9:4e:03:09:ec:d5:68:75:7d:48:c1:02:60:58:
         a3:94:a8:f5:0d:5e:4d:b7:1c:e3:44:0e:46:d8:50:10:d3:fe:
         74:50:f7:b1:e7:a4:53:c8:df:73:77:63:04:5a:40:79:44:32:
         96:38:c7:22:12:da:c9:0a:c4:93:43:e7:0d:ab:51:f8:de:d4:
         95:b4:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:00 2026 by rpki-client