Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c47e891-1362-30d5-b88a-16c2bccce378.roa
File:                     5c47e891-1362-30d5-b88a-16c2bccce378.roa (raw, json)
Hash identifier:          BTXjp6ecjn2lVLO9WOvmiSsZ2vepBAljvYJeU4kcteU=
Subject key identifier:   38:A1:92:5A:AC:B9:92:1F:52:CA:FD:7E:FE:3B:57:46:2E:50:0F:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF878EC2F98FFDFBF2E6B6488
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c47e891-1362-30d5-b88a-16c2bccce378.roa
Signing time:             Tue 24 Feb 2026 15:18:45 +0000
ROA not before:           Tue 24 Feb 2026 15:18:45 +0000
ROA not after:            Mon 25 May 2026 14:18:45 +0000
asID:                     36625
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:78:ec:2f:98:ff:df:bf:2e:6b:64:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 24 15:18:45 2026 GMT
            Not After : May 25 14:18:45 2026 GMT
        Subject: CN=4f1a2124-b6d6-4bfa-8ffc-e4d6dbe36925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:c7:17:5f:3e:da:1b:c8:20:2f:28:f3:6c:
                    87:c6:d0:9b:5e:ba:0e:f0:bc:7b:c8:e4:98:06:5a:
                    a9:e8:49:e9:14:a0:c7:12:24:53:a7:a5:35:56:27:
                    c9:6a:22:36:fc:b4:3c:1e:b3:d8:2b:90:2f:67:60:
                    b1:a4:7d:c2:19:9f:e3:5f:a2:fb:bf:e1:9b:30:86:
                    20:09:b9:7c:1b:09:9f:9e:4d:18:c8:d8:74:b0:20:
                    50:a3:21:61:79:a2:da:ea:a5:84:7d:96:ac:d8:c4:
                    9a:4f:ed:df:20:a3:4a:b3:6f:0d:0f:10:14:df:72:
                    dd:7e:44:e0:30:10:46:d5:40:83:5c:e0:9d:37:39:
                    ef:28:31:bc:62:fa:3d:f4:05:9a:03:f7:72:6b:6d:
                    e8:97:ee:6f:37:64:cd:26:91:93:1d:35:f5:83:a2:
                    14:83:8e:32:da:4e:ef:c5:06:ae:1a:3f:1c:47:bd:
                    68:c0:30:b1:5c:e4:30:b4:82:08:7e:1c:52:80:64:
                    29:18:3b:24:cb:d2:1c:e1:8a:b5:53:35:5d:2d:3c:
                    43:58:37:81:74:ef:24:ca:06:72:34:08:21:1d:bc:
                    27:eb:a1:f3:8c:e6:38:e2:d7:2f:90:c6:b3:7d:10:
                    88:3c:32:ec:5f:17:43:4b:78:05:4f:36:20:d9:05:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A1:92:5A:AC:B9:92:1F:52:CA:FD:7E:FE:3B:57:46:2E:50:0F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c47e891-1362-30d5-b88a-16c2bccce378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:e7:69:ee:23:6e:96:d3:88:d6:03:bb:cf:27:e8:a1:37:
         ed:3d:15:80:5d:26:f7:c0:d2:e5:56:59:30:9a:2a:f9:52:9d:
         79:60:6d:60:ff:ef:c4:9a:cc:75:b9:e0:a4:59:a6:1a:2f:3b:
         bb:d4:0c:08:64:bf:57:6d:07:cb:99:4f:fd:4d:71:38:a1:b1:
         77:1d:30:be:85:51:fb:db:c3:32:65:c8:d1:78:3d:0b:4a:96:
         78:57:22:7c:b2:76:80:82:fc:a9:5d:ba:a0:eb:20:ca:82:ee:
         6c:1b:8e:53:1b:7d:8c:de:df:57:40:fb:3e:6c:f0:35:02:ec:
         f5:04:89:7e:f2:e0:73:d9:a8:e1:98:d1:02:dd:1f:87:fb:3e:
         20:da:21:e1:7c:2e:c6:a1:48:34:91:e8:f3:92:0a:41:d6:a3:
         05:16:28:9f:b4:4d:49:82:47:e5:91:f5:55:ad:bc:7c:dc:05:
         d2:f9:31:2e:18:e9:43:95:76:6a:b7:cc:6e:21:0a:e4:5f:59:
         e8:3f:1d:26:c6:05:27:9f:ca:19:b4:bd:c5:65:00:de:25:5f:
         29:1e:cf:c5:8e:c2:5c:ff:d4:9f:51:e4:b7:1d:b8:78:99:2a:
         0c:53:b8:33:8b:37:0a:d0:9d:1e:c1:42:b1:c6:9c:f7:98:00:
         7d:47:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:19 2026 by rpki-client