Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fac2567-7702-3691-93e9-d78cccc29c9e.roa
File:                     8fac2567-7702-3691-93e9-d78cccc29c9e.roa (raw, json)
Hash identifier:          JxiLKHm6ZLFybnq93zsZgH60KGxPQYagIjTo+/+cVnk=
Subject key identifier:   E0:01:DF:9C:8F:4B:FE:2F:47:0F:D9:FA:93:66:A4:5F:85:00:88:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFE0B2DC7CABA4258E61787F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fac2567-7702-3691-93e9-d78cccc29c9e.roa
Signing time:             Thu 26 Feb 2026 15:12:29 +0000
ROA not before:           Thu 26 Feb 2026 15:12:29 +0000
ROA not after:            Wed 27 May 2026 14:12:29 +0000
asID:                     396589
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:0b:2d:c7:ca:ba:42:58:e6:17:87:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 15:12:29 2026 GMT
            Not After : May 27 14:12:29 2026 GMT
        Subject: CN=9f7a8fcd-b901-4ab9-a5c4-970419f2a50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0b:15:60:70:e6:9b:75:79:d9:7e:74:9d:b0:
                    9c:05:3a:bd:e7:e0:46:eb:1c:a9:c9:b3:5a:e3:e1:
                    bd:d5:bb:c2:03:8b:e0:82:65:7f:4e:bd:82:04:d2:
                    54:68:8c:64:a8:24:1d:16:1c:01:8c:24:13:09:5a:
                    3a:e6:8f:4f:01:26:41:cb:72:08:54:62:8d:3b:fc:
                    d0:cc:00:e2:d7:42:37:85:13:23:b9:fb:2e:b8:ca:
                    ed:0c:27:dd:44:ab:dc:24:4d:08:8d:96:53:d2:d8:
                    bc:4c:2c:7d:be:8a:cf:ab:c8:8b:a7:3d:74:d7:2b:
                    8b:4e:24:68:b4:50:6c:3a:1c:98:72:41:d1:8b:10:
                    f7:fb:74:a3:e8:8e:ad:8d:85:a0:9f:54:8e:52:5f:
                    cf:8b:63:8e:24:95:75:fa:ee:9d:e0:6a:5f:3a:7d:
                    e4:ab:b4:0c:dc:fe:e5:ef:58:b9:de:02:bd:83:f3:
                    73:2c:9f:78:3f:f7:c7:8d:b0:86:25:e6:ff:d2:ff:
                    ba:3c:0c:74:7b:9d:74:fb:ae:9a:e0:5f:77:c5:c9:
                    18:43:f9:f1:51:68:43:dc:15:75:36:c2:2b:17:ea:
                    b5:31:3f:58:d2:71:6b:cf:b6:f0:0b:78:ea:c9:f2:
                    1d:a7:a1:22:00:4a:3a:07:7f:40:0f:21:4b:5a:96:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:DF:9C:8F:4B:FE:2F:47:0F:D9:FA:93:66:A4:5F:85:00:88:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fac2567-7702-3691-93e9-d78cccc29c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:04:c5:a2:20:af:fe:c0:31:14:e1:b7:b4:94:14:17:99:49:
         87:af:ee:90:bd:5f:45:54:1f:5e:3b:53:a1:f1:2b:52:b8:75:
         6b:b5:37:78:28:f6:53:20:4b:08:57:82:07:1c:8e:d1:4c:ef:
         5b:46:96:e3:72:e5:54:73:4d:fa:1d:60:9d:94:b0:9d:3d:bf:
         85:42:3e:b7:e7:94:fc:f9:4b:b0:4c:59:fd:45:3e:64:c6:0a:
         d4:91:cf:0d:2f:70:cc:19:a9:c8:cf:f6:e2:f5:4e:be:1d:45:
         7f:9d:c5:c8:c8:2e:d4:59:3a:6f:54:37:00:81:c9:7a:32:5a:
         86:3c:4b:2c:54:a6:5a:17:2f:32:65:ba:9c:22:c1:4a:86:97:
         2a:eb:77:21:0a:59:e2:5d:f9:9a:38:8c:68:39:6e:59:40:67:
         27:9c:9f:26:b2:53:70:9a:30:67:50:f3:22:a8:0e:24:6c:6c:
         55:a1:7f:5f:33:57:cb:98:e8:d9:46:eb:83:38:2a:29:4c:f2:
         5d:a2:8c:55:96:65:f2:2e:81:10:50:2c:e3:1e:21:c5:ec:4d:
         e1:0c:d7:d2:25:4e:45:87:98:74:cf:91:3b:db:2f:87:4c:18:
         d0:b5:b2:33:a7:bb:47:89:90:f9:7d:20:8a:ae:8f:14:97:0a:
         f8:d4:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:34 2026 by rpki-client