Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa
File:                     99747e2f-7cb5-37a0-8664-f750f2bde505.roa (raw, json)
Hash identifier:          jCoLISQJchr6M6Q/8VMc8X4jc+tF03P2dv/wqqZkeNI=
Subject key identifier:   90:DA:EB:59:B7:8A:3A:52:04:94:9D:F3:19:8F:5E:28:A6:16:D5:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037D4FAC86F417D4E41529A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396589
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:4f:ac:86:f4:17:d4:e4:15:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=866c817f-bbe3-4420-867b-02be4fd99603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:61:c0:59:8a:5e:d1:e7:13:63:97:0e:28:
                    3c:65:1a:04:04:9b:81:41:20:af:0c:e9:65:44:7e:
                    bc:f9:78:a6:e9:8b:78:ee:dd:b3:30:b2:e0:07:78:
                    d8:86:2f:b3:b0:5f:62:c9:1a:7f:ed:1c:c5:82:61:
                    5e:c0:fc:10:a4:e2:70:6b:ed:6b:0a:6b:0c:15:bb:
                    b8:2b:9e:4a:a7:e2:f7:a6:61:9e:4a:07:cc:a9:65:
                    09:39:8d:82:3b:b1:39:cc:ff:bd:36:f9:9e:1d:31:
                    3c:5c:dd:2f:02:3d:ee:10:e4:a6:93:5c:48:fc:35:
                    f8:a9:f2:cd:5a:91:b5:54:8f:ac:d0:07:21:5a:64:
                    61:67:10:94:9c:47:8f:2a:6d:a4:c0:d5:53:a0:fd:
                    5a:70:84:63:08:82:12:47:1e:e2:5a:ad:49:3a:1f:
                    58:be:9c:6b:75:04:9f:dd:6e:06:7e:91:a2:bd:21:
                    da:e4:86:8e:5b:2d:4e:67:6d:02:00:99:81:2b:88:
                    1d:46:64:0f:9b:c2:c7:26:8a:e2:e1:ab:07:6f:14:
                    55:22:8f:e4:ce:19:38:24:dc:7d:d5:af:ac:78:14:
                    c1:e4:de:ef:a9:d4:96:6c:d6:d4:25:ed:1e:43:67:
                    16:10:52:b8:67:67:78:cc:e1:24:88:3f:d6:35:d4:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DA:EB:59:B7:8A:3A:52:04:94:9D:F3:19:8F:5E:28:A6:16:D5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:55:b6:39:64:db:c0:31:cc:44:51:a9:79:07:e7:16:33:30:
         82:41:47:19:4a:03:7d:ab:a1:3b:a0:61:9c:12:5d:c4:17:97:
         1c:9b:7f:f3:e5:99:7a:29:c0:d3:53:30:b3:da:d3:56:76:1f:
         e4:cc:31:eb:97:51:24:75:6f:4a:9e:4e:91:8a:6c:d7:8d:49:
         94:61:aa:5d:00:1d:a1:cf:32:9d:c7:5d:fb:1e:ac:b9:bc:07:
         ff:73:7d:06:9f:3f:e0:50:be:99:f0:bf:67:36:b3:1c:f5:db:
         72:56:a8:1b:0a:e0:33:ec:41:46:e9:30:ed:f7:21:5d:52:b9:
         7f:f9:11:7c:53:46:58:6b:61:52:21:8f:d5:72:93:73:50:ef:
         7d:19:f3:38:af:e4:bb:6f:d6:ac:8a:a2:d1:06:57:b4:ee:49:
         ea:ec:b5:e2:74:d4:ab:08:1d:ae:79:df:82:b5:39:c3:f1:11:
         cd:1a:a0:c6:c2:b2:25:7a:db:f7:eb:6a:33:bb:2f:03:53:ec:
         3c:d9:af:a5:f2:1c:62:7b:93:29:11:64:c2:8c:d9:91:6d:4c:
         6b:b0:a9:68:b7:39:32:5e:d8:d7:9d:97:a8:fc:ed:ce:b1:2e:
         96:07:7a:ef:ae:e0:0f:eb:45:86:5f:44:e9:a7:f0:34:f5:1a:
         e2:b8:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:44 2026 by rpki-client