Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa
File:                     7e325443-0f22-3427-b95c-d38a907b559b.roa (raw, json)
Hash identifier:          4gPuiVWgSjmunmYFQuuacEYBtb2edS1jSZj4awGuS3c=
Subject key identifier:   24:76:65:A3:4A:DD:C4:16:08:A4:AC:AB:2E:8A:1D:0A:A6:E6:AB:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFDEAA89ADF6EE79B1B129780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     396600
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:a8:9a:df:6e:e7:9b:1b:12:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=16aa32b3-0036-4467-a623-e0c09743d59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:db:ac:d2:2d:61:10:d5:a8:08:23:d7:a5:
                    a3:16:48:4a:cb:af:30:70:af:95:d7:32:ac:30:a6:
                    4a:e0:5c:f6:a1:4e:32:c5:a3:f0:da:24:c2:5d:7b:
                    d3:aa:9d:de:78:2a:d6:49:f4:67:ff:0b:8d:e8:bb:
                    99:1a:69:18:4a:7a:c2:36:fc:83:25:6a:6c:81:55:
                    29:e8:59:87:58:d9:51:19:b0:86:67:ea:15:f6:dd:
                    6e:e4:b5:cc:06:28:69:ea:13:64:a9:ae:60:17:81:
                    43:35:c3:d3:0c:d1:dc:96:39:bc:61:a5:97:d7:c0:
                    e4:5a:39:9a:81:54:ae:54:49:87:7b:1b:0e:eb:18:
                    8d:9d:aa:8e:d5:27:4c:5d:36:98:61:a6:07:34:d5:
                    3a:b5:ae:6e:17:7d:08:fe:f1:ba:53:de:39:45:ec:
                    11:d6:0d:c7:ac:86:a7:ef:87:18:f0:6e:81:37:ac:
                    ce:05:2a:d0:c1:15:a3:da:a3:bc:b3:1a:54:2e:d5:
                    37:6b:a8:22:96:48:eb:e9:bd:bf:9d:51:e1:a4:ca:
                    34:7a:0b:14:49:d8:12:d0:6f:ed:be:ed:df:35:d2:
                    67:d6:16:22:b2:7f:df:cb:31:f3:e4:2f:65:78:83:
                    09:ef:e7:4e:be:41:81:f1:37:68:cb:91:9b:50:61:
                    b9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:65:A3:4A:DD:C4:16:08:A4:AC:AB:2E:8A:1D:0A:A6:E6:AB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:c8:fe:0b:a6:e5:2f:3c:04:48:45:1a:50:38:75:9b:e7:
         8b:b8:c7:e9:bd:66:22:6d:14:06:38:b5:46:0c:0a:65:e9:d2:
         77:e8:a0:19:6b:89:17:3a:65:70:91:1e:e4:1e:10:0e:2f:df:
         f8:84:85:a7:24:89:6d:77:54:3d:7b:7f:e6:e9:f6:a6:c4:45:
         0e:88:39:8e:b8:68:09:26:3b:f0:cf:5d:54:1b:4c:29:ac:f0:
         65:ee:d4:c9:09:98:bd:ac:47:35:e8:48:78:3f:23:1c:f3:76:
         d1:f6:57:40:49:f7:9a:6e:28:9e:a3:1d:9b:35:d0:e0:6f:3e:
         a3:30:6b:fe:56:1c:ae:11:6e:de:a6:99:ff:4a:16:ab:4e:16:
         0c:e7:4c:b4:da:4d:63:56:db:26:75:de:b2:c3:15:1f:29:50:
         a9:c3:25:5b:91:e3:ef:68:aa:32:75:11:f3:9e:e0:40:f2:05:
         0e:26:07:91:14:5b:e8:34:93:3b:c3:f2:e4:d4:a2:6f:2b:24:
         11:ba:90:58:0e:0b:e1:55:56:53:ce:0d:5f:fe:25:f8:78:ef:
         4c:92:be:62:92:a6:ca:2b:c9:32:15:d1:aa:53:22:df:c6:e4:
         2a:c9:36:3a:15:a2:9e:2a:37:ec:9c:36:f2:99:00:a3:6b:aa:
         c4:55:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:00 2026 by rpki-client