Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd68236-9621-373f-824d-28209f73ab00.roa
File:                     7dd68236-9621-373f-824d-28209f73ab00.roa (raw, json)
Hash identifier:          Fe3W8OPwuWHfat6s7eweDo7REHQVqXeWMC24X7CFG1A=
Subject key identifier:   AF:4D:EF:70:B9:BF:71:24:EF:95:D4:3E:6C:D1:CA:42:CA:7F:06:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEFF22BB28CE16511E88FD080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd68236-9621-373f-824d-28209f73ab00.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     396540
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:2b:b2:8c:e1:65:11:e8:8f:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=430589bd-26c9-4a04-975f-1b7bacf32c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:58:89:84:09:f9:ec:25:4f:1f:27:34:ae:
                    c4:64:be:f1:0c:92:b8:1d:d9:41:77:bf:f8:73:b0:
                    07:81:3b:59:0c:6a:98:69:9d:cb:bc:0a:3e:d5:c5:
                    8c:aa:7c:68:47:ca:34:87:04:19:1c:e3:0b:c7:8d:
                    96:70:65:aa:27:0c:1a:15:81:d0:ce:0a:d4:82:18:
                    31:49:93:3f:89:fb:a5:0e:ad:2c:c6:bb:8e:9b:b1:
                    ad:dd:cf:d7:d4:c2:45:af:a6:42:29:6a:c1:c2:54:
                    e6:51:02:17:00:b7:43:db:e7:04:15:05:fe:35:de:
                    28:d6:38:be:8b:df:a9:2e:5e:fb:a6:ce:86:8e:dd:
                    ba:a5:00:46:00:94:b7:6a:36:5c:2c:a9:e2:8c:4c:
                    df:0a:74:6f:03:1d:c7:1d:fb:8b:f2:27:6d:37:df:
                    bd:bd:42:b4:e9:57:88:d5:f2:4b:28:6d:b0:70:59:
                    a4:cd:f5:25:27:d8:5b:a6:f6:54:1f:a6:e5:36:73:
                    5f:2a:8d:ae:7a:b5:34:ce:3e:17:22:03:af:0c:9a:
                    97:06:16:9b:ca:ab:7d:ef:79:d1:de:55:84:d1:e0:
                    19:3c:09:0f:b2:0b:ed:c6:e7:af:46:b8:03:6b:36:
                    00:41:10:16:b8:c6:11:27:2a:31:fc:a0:d8:ff:2c:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4D:EF:70:B9:BF:71:24:EF:95:D4:3E:6C:D1:CA:42:CA:7F:06:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd68236-9621-373f-824d-28209f73ab00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:38:fa:81:2d:f6:04:bd:ac:e6:ec:03:4f:93:ae:33:5a:
         e8:e8:f4:05:c2:08:ed:85:14:11:e1:bc:c0:5c:7c:55:20:7c:
         79:15:1d:b9:02:01:a9:94:3e:b5:0e:1b:28:fa:d6:fc:66:94:
         f9:3f:ad:c9:8d:1e:40:fa:e4:28:99:9e:60:a6:b1:fe:97:88:
         d1:2e:70:a2:91:eb:10:f5:de:59:76:7a:8c:91:ae:1f:d1:6a:
         59:d7:55:f4:8a:43:b1:a1:aa:1f:d9:b2:66:df:19:1a:15:ca:
         91:af:b9:a7:fb:7f:d9:93:10:1d:81:a6:23:fa:40:64:ae:bf:
         bf:f4:b7:ca:7d:c5:9d:94:ad:f7:78:99:eb:94:d8:24:6b:25:
         d6:eb:9b:97:1f:33:2e:a5:f4:23:b4:27:7e:1c:c0:ec:b9:9f:
         95:e7:f5:c1:9e:0e:4d:b4:91:e5:04:6e:94:84:c3:78:04:d9:
         53:85:05:b7:8e:56:52:a9:ee:2f:37:e5:86:cb:9a:b8:67:01:
         3f:59:69:23:2b:38:32:0d:63:fa:aa:e8:3f:4d:3d:c8:2a:8e:
         ab:9a:d6:ad:fc:84:6d:ff:cb:79:04:97:4a:cf:86:32:4a:be:
         7c:05:c6:23:66:a6:ff:4c:ea:90:76:c7:ad:a3:2b:af:60:d8:
         5a:4c:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:41 2026 by rpki-client