Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58bd5f67-aacc-3850-a44d-11eaccad23b0.roa
File:                     58bd5f67-aacc-3850-a44d-11eaccad23b0.roa (raw, json)
Hash identifier:          UkRNCKH8S1hERUTs1VKB8/BdTGN2lFNpxefh9HQk9UM=
Subject key identifier:   41:91:AD:C5:E2:7F:66:F9:B1:EF:CC:6E:34:54:F1:D7:24:07:CC:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEFF24125764D7B6FC1BF9451
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58bd5f67-aacc-3850-a44d-11eaccad23b0.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     396589
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:41:25:76:4d:7b:6f:c1:bf:94:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=a13fcf20-c0a9-4422-b767-94dc8111896e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:06:f3:22:b7:8c:62:a2:bf:a6:76:0b:8b:
                    cb:4f:40:90:fc:8b:69:92:36:50:6d:45:fb:13:80:
                    d0:ec:e1:9e:30:fd:7f:59:8f:2f:03:cc:90:58:f1:
                    15:31:63:d7:98:cd:45:a1:00:f8:7b:66:4f:13:9d:
                    3b:1c:d0:4d:bd:06:7f:4f:e6:81:79:b7:f7:64:26:
                    83:09:54:cf:92:a1:4b:cb:f4:4a:bb:37:58:d5:d4:
                    a6:a2:3e:70:e0:1f:e3:57:e9:d1:0b:73:38:25:79:
                    c1:4e:35:1a:6d:c0:05:be:b3:c3:2d:1c:ab:24:99:
                    57:72:95:13:1a:d3:8c:b6:d4:68:cf:61:48:da:c9:
                    19:bf:77:6e:44:45:a7:bd:47:49:15:7f:14:ed:30:
                    5a:1c:38:c9:34:c0:62:e7:64:2b:de:ac:b8:82:71:
                    87:a8:30:b1:97:bb:49:4d:b7:0b:8d:ab:a7:45:3d:
                    9c:1a:9d:d9:d7:06:cc:c4:17:22:15:36:df:9f:77:
                    c3:3f:31:e1:af:be:92:a4:c6:c9:f9:5e:73:16:48:
                    ad:ff:b8:d0:cf:e5:dc:0b:f8:f3:02:c2:53:00:cd:
                    74:31:1c:24:f4:a8:aa:54:06:8c:7d:86:03:69:78:
                    47:a1:5d:2e:71:16:77:f8:eb:ab:0f:00:98:72:96:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:91:AD:C5:E2:7F:66:F9:B1:EF:CC:6E:34:54:F1:D7:24:07:CC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58bd5f67-aacc-3850-a44d-11eaccad23b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:53:04:3f:34:e7:36:27:33:14:60:2d:26:5b:fa:60:82:82:
         01:b6:32:d0:02:c1:3e:e4:33:73:ea:48:9c:03:52:f5:1b:17:
         69:b2:a8:7b:3e:7f:9f:2f:ff:3b:6c:c3:cc:48:5b:7c:b4:bc:
         0e:fe:44:4e:6f:c0:44:82:84:68:35:ce:bf:f2:07:85:56:0c:
         6d:30:11:e9:56:31:8e:8a:18:ce:2f:e1:7d:db:0d:28:2f:d7:
         bd:7f:aa:81:c9:4c:db:27:87:e8:4a:0b:75:d5:3f:27:38:8a:
         f5:4c:c0:7c:64:76:dc:53:f8:65:3b:20:13:51:be:b7:99:0c:
         d8:ca:12:21:75:bd:2f:a0:af:b2:db:7e:db:8c:c8:c6:09:cf:
         70:f7:b9:96:ba:19:2d:1b:eb:e5:b6:84:96:ba:b3:9c:fd:47:
         37:62:ce:7a:c8:c0:ad:f5:8c:d3:fd:6b:e7:f7:63:95:15:07:
         86:86:8f:20:d4:06:cf:50:cb:08:30:5d:93:43:68:98:e5:9b:
         63:6d:3a:a9:7c:5a:5f:31:6b:3b:5f:58:12:97:c6:6c:b8:67:
         86:b4:e4:06:eb:88:39:aa:0f:83:d0:21:9d:ad:25:5c:a3:4b:
         d7:9d:a3:ed:25:b3:60:6f:05:aa:89:36:77:73:5d:3c:03:a8:
         a6:86:ed:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:13 2026 by rpki-client