Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ee7cdc1-ca4e-39be-afc1-7371254d0dd7.roa
File:                     8ee7cdc1-ca4e-39be-afc1-7371254d0dd7.roa (raw, json)
Hash identifier:          AWzVGTHF+XS8b0MhRtcc0Om0Lw+n3RV3r3iSdg/ovns=
Subject key identifier:   AE:73:9E:73:89:5E:34:27:62:9B:79:25:BC:3F:AA:8B:E7:2D:1C:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037D1306C12A863613D88BA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ee7cdc1-ca4e-39be-afc1-7371254d0dd7.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396597
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:13:06:c1:2a:86:36:13:d8:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=e664a616-a553-42f1-bece-bd3056db0161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:12:45:70:07:d0:c3:23:f3:54:34:86:68:
                    41:b4:bc:54:dc:34:bb:ab:48:50:96:86:f0:46:11:
                    48:1b:6d:44:96:99:19:85:ca:85:0d:b2:2c:cc:ae:
                    f8:6a:5a:b6:14:d8:42:4c:da:af:0d:5d:97:9c:6d:
                    25:03:94:68:72:fd:2e:c3:94:4d:9b:56:fe:b2:e4:
                    0b:40:5b:50:00:55:bd:9b:58:08:2d:30:9f:68:d7:
                    40:10:d2:cf:08:a3:ce:c6:e5:f6:12:18:53:72:c2:
                    de:86:f1:c5:33:9f:c7:b2:9b:f6:86:14:e8:1f:82:
                    6b:7f:2a:de:f1:0b:5d:75:c2:c0:17:65:64:9c:5a:
                    61:68:24:ac:47:5a:7b:a7:e8:c2:07:60:4a:0f:ae:
                    2a:b7:64:bb:6d:8b:e5:35:cd:d9:44:8d:fc:3e:85:
                    11:b7:2a:6a:35:6d:89:d5:f9:df:be:8e:8d:d1:51:
                    44:49:ab:99:89:19:4e:a2:67:b6:07:3d:0c:15:44:
                    b3:87:ef:a3:73:f2:97:bf:ec:f9:96:3b:5d:75:50:
                    08:f8:9d:54:8f:3d:c1:85:0b:de:44:bd:6d:5c:a8:
                    77:42:af:cc:3b:00:fd:ac:42:02:28:ea:33:26:15:
                    c0:fd:46:ad:9f:ef:83:b0:f8:b9:64:40:f9:8e:25:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:9E:73:89:5E:34:27:62:9B:79:25:BC:3F:AA:8B:E7:2D:1C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ee7cdc1-ca4e-39be-afc1-7371254d0dd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:39:45:d5:26:62:64:48:7f:3f:56:6d:98:1d:fb:26:fa:c2:
         e3:46:ca:70:93:45:1a:e6:7e:51:d6:90:5e:d9:1e:16:94:d0:
         b2:8c:09:aa:3e:40:44:d3:ae:0f:cc:06:e0:81:25:bc:be:01:
         60:00:b1:f1:f8:bf:32:83:ca:79:f9:39:de:cb:90:b1:7c:1e:
         2c:d9:a0:d3:5c:2f:75:cc:2b:fe:ed:ff:0f:6a:96:51:cd:e9:
         eb:cf:97:1f:fe:59:7a:91:0a:46:85:51:38:c3:97:e9:7b:2c:
         11:38:2f:b4:9e:45:1a:94:fb:4d:f4:91:84:7b:d7:8e:49:b0:
         cc:18:5b:d8:d6:e4:72:8e:09:86:76:0c:61:1e:de:67:81:e5:
         e4:e2:fa:42:36:cb:3f:fc:50:40:2c:3a:9c:33:05:1a:e9:d7:
         b0:23:4a:16:ff:b0:e7:9b:a0:c0:71:0a:b4:e7:e2:76:5b:11:
         19:27:5e:fb:42:c1:fa:7b:5b:03:0d:69:3c:9e:c2:53:26:94:
         3a:5c:0c:01:3d:b4:6c:08:55:cc:23:24:a5:b8:7e:8d:5b:2d:
         69:ef:e5:5c:17:73:92:32:6b:82:7e:9f:79:f0:eb:ab:aa:97:
         30:70:4b:a0:79:61:14:33:47:02:06:e5:2a:f9:56:84:c0:ac:
         0a:69:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:30 2026 by rpki-client