Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7adc7ea8-1ffc-3ad2-8221-a44d1e6420f8.roa
File:                     7adc7ea8-1ffc-3ad2-8221-a44d1e6420f8.roa (raw, json)
Hash identifier:          jx4LmTZGNgcIfKaJSmuOgRjntlPupJZRECj/OHK7rYw=
Subject key identifier:   1A:2C:AF:26:76:62:80:1A:D2:E2:19:BB:F8:52:C8:31:CC:B2:B7:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEFF260221462E0FC00C34E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7adc7ea8-1ffc-3ad2-8221-a44d1e6420f8.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     396587
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:60:22:14:62:e0:fc:00:c3:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=b1cdf1dc-4c07-40c4-b780-e944217bffc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:82:d2:cd:b6:e7:08:21:ed:f6:6b:9d:5e:
                    ac:4b:28:c8:6a:c1:7c:13:01:7f:89:ad:fe:0b:89:
                    a3:28:ee:89:89:99:8a:e3:17:3f:a4:cc:79:3f:4d:
                    36:0d:29:28:f4:cf:7b:e0:1b:a2:69:06:65:1b:9a:
                    03:bb:27:b3:84:23:bf:99:96:d6:a7:64:d0:06:24:
                    0b:bf:4c:80:d7:66:19:a2:c6:86:e6:c5:8a:7a:6d:
                    0e:86:ef:cf:b1:64:1b:3d:02:e1:0f:24:e3:db:3d:
                    3d:b4:97:36:d8:a6:a9:2b:c0:13:d4:e7:e6:ad:a1:
                    11:f1:d4:15:17:f7:d0:aa:f3:98:16:55:42:c0:83:
                    25:c3:bc:9c:12:a5:45:d7:06:d9:6a:f1:0a:d1:d4:
                    0e:85:d7:09:7c:a9:9a:94:46:05:dd:ea:ce:60:03:
                    75:5f:04:7a:32:f6:24:da:78:c9:e2:1a:8d:a4:bd:
                    33:1a:c7:0b:98:52:38:2b:5f:cf:c3:57:0f:d1:6e:
                    52:79:84:16:a8:38:39:ba:ed:b2:c1:4e:9c:73:c5:
                    f0:c6:c3:2e:41:de:55:2c:f4:65:dd:a4:ef:ec:95:
                    78:41:09:e5:60:7f:36:0a:a0:0b:1a:c0:62:b8:da:
                    76:bf:5c:f1:12:65:ad:72:77:a3:b2:a2:ba:5e:9e:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2C:AF:26:76:62:80:1A:D2:E2:19:BB:F8:52:C8:31:CC:B2:B7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7adc7ea8-1ffc-3ad2-8221-a44d1e6420f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:47:c9:3b:90:74:4e:61:f4:2c:04:f5:27:ff:df:f0:46:e1:
         b6:56:48:38:dc:08:55:2c:cb:53:9d:f8:24:7a:f9:18:65:f0:
         2d:1d:0d:14:f8:a4:78:be:93:97:61:e8:5f:4b:a5:3b:4f:97:
         d2:49:63:47:64:b2:51:3a:36:af:dc:4f:03:59:cf:ba:1c:55:
         06:c4:81:9c:04:ca:95:1d:9a:a4:47:5f:21:5d:55:83:d5:20:
         0e:69:68:60:fd:d3:e6:9f:ad:cd:8b:6c:35:c2:35:78:42:59:
         94:a7:28:f9:ed:08:b9:48:7d:1f:ac:45:37:66:73:df:05:0d:
         24:97:ac:cd:ee:d4:aa:ed:bf:6c:b5:c7:b6:10:ee:ec:07:97:
         59:52:dd:d4:f3:c7:50:1b:90:1a:22:7e:91:13:36:b8:d4:81:
         3e:e9:fd:bc:44:1d:e4:44:2e:43:99:a4:7d:63:42:67:77:f5:
         30:f8:b9:09:e0:24:f3:65:93:a8:2a:eb:94:55:f9:01:34:70:
         d6:f9:83:18:6b:b8:58:07:35:4f:b1:d3:84:ce:e8:34:70:c8:
         d2:6b:94:90:59:12:78:e6:a5:2f:ad:74:8b:33:7f:80:cd:bd:
         b7:36:14:ba:0b:92:cf:7b:d7:b0:77:a0:28:b2:47:b3:0a:99:
         52:07:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:22 2026 by rpki-client