Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b8b2665-401f-327a-b5a3-7f5d259f93fb.roa
File:                     9b8b2665-401f-327a-b5a3-7f5d259f93fb.roa (raw, json)
Hash identifier:          TizlffWwBUSHRPQav5F5KugJIKS7U3bcEtzzGpU+n8A=
Subject key identifier:   C8:B2:BC:0D:A1:2D:C5:0C:5A:AF:61:79:65:73:F1:D5:2B:BF:80:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEFF25F89340CC1C313697E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b8b2665-401f-327a-b5a3-7f5d259f93fb.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     397205
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:5f:89:34:0c:c1:c3:13:69:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=f2862714-e880-476f-9153-8873c330701b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:93:86:c2:3a:27:08:10:73:ce:aa:ce:79:
                    19:8d:71:dc:17:df:ec:31:f3:9b:14:45:2f:30:e0:
                    28:19:45:4a:ec:ab:cb:0f:79:cb:fa:a0:6d:09:05:
                    f3:a5:9d:5a:23:6d:09:40:c8:00:4b:f4:db:80:2d:
                    99:ef:28:0a:c1:95:30:96:9a:97:06:56:5b:02:88:
                    e1:46:6f:d5:a5:e6:d6:b4:55:dd:9c:21:c3:13:7d:
                    d3:2c:54:e3:71:d7:ef:6b:f7:9f:d5:4d:66:56:1b:
                    f9:b7:53:7c:0f:89:f1:96:49:ad:c8:5d:37:b5:03:
                    93:44:2c:38:25:36:50:b3:6e:98:3b:91:53:16:cd:
                    23:c0:3e:45:9a:6e:a3:02:20:18:c2:87:ba:6d:81:
                    6d:ea:67:e1:59:6d:92:ee:56:11:b0:6b:8b:8a:5a:
                    f3:50:f6:53:6a:8d:a9:be:c2:0a:8a:37:37:6f:38:
                    3d:a8:69:bd:93:a5:1c:1b:d6:31:b3:6a:ab:3f:92:
                    de:df:c4:9a:ee:91:13:58:cb:b9:30:23:20:14:59:
                    87:32:d2:dc:a3:69:2f:d5:73:4d:57:78:48:3c:4c:
                    0c:9e:0e:57:c5:ea:43:50:21:77:d9:f1:5f:63:ce:
                    c7:f9:85:86:c3:f9:a1:87:b4:2c:7f:ed:0f:6e:a1:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B2:BC:0D:A1:2D:C5:0C:5A:AF:61:79:65:73:F1:D5:2B:BF:80:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b8b2665-401f-327a-b5a3-7f5d259f93fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a2:50:e1:b7:9a:82:78:b5:8b:6d:64:ef:24:4b:a1:ce:d9:
         69:c7:50:29:da:68:a6:01:82:a1:e6:e1:55:50:6f:ba:44:87:
         dd:28:05:42:6a:af:bf:d5:66:f9:47:98:3e:86:22:82:c9:39:
         97:13:e1:3d:0e:d9:f4:e0:ee:e5:60:ae:c8:1e:7d:99:4f:a1:
         a6:74:0b:43:1f:04:e5:1e:48:46:86:bd:ac:ae:25:f5:dc:94:
         e9:f0:1b:84:48:49:e5:f3:88:69:d5:96:25:69:5f:0b:19:d4:
         b1:11:d0:ce:0b:66:83:25:17:90:02:95:7f:b6:30:3c:7c:f7:
         15:90:6f:ca:35:e8:f8:f4:a6:d8:8d:6c:1a:41:e6:6d:1c:98:
         bc:7e:98:ca:7b:fb:d2:4b:d6:74:13:d9:2e:d7:2b:95:0f:9a:
         17:71:24:06:13:88:56:07:a4:db:66:1b:06:04:34:7b:5a:61:
         72:80:2a:fa:8e:62:1c:c8:c0:85:79:be:1c:43:25:29:71:0d:
         4c:cd:4f:ba:ca:7f:b9:73:75:67:8c:09:ec:9e:c9:d0:28:04:
         46:af:e5:ad:17:bc:48:5c:a3:28:29:4f:49:4a:42:4b:7b:b7:
         23:ca:ac:47:1f:b0:c8:0b:10:e2:fa:fe:c9:fb:4a:bf:a9:ad:
         3a:46:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:29 2026 by rpki-client