Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
File:                     9f57b5fe-9a49-347f-99a9-78749563a00a.roa (raw, json)
Hash identifier:          qeNUBfceUAmAqBt84gzqO1e5ro2g8Dy5J2w1elfIRhk=
Subject key identifier:   01:22:D6:84:75:57:03:39:42:5E:ED:00:8E:39:32:DD:40:8A:42:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFB1CFCA2F596E24EC9E88DB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     396611
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:fc:a2:f5:96:e2:4e:c9:e8:8d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=c117eac6-c098-4ae9-abb2-4be8ed11497f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:fc:a9:60:89:2a:a8:8d:9e:3e:b5:da:f3:
                    f4:48:20:9f:b8:a9:d9:7e:30:4a:87:ca:51:c9:9b:
                    2f:b6:12:c6:e3:6b:f4:a7:7e:38:f9:9b:d8:a5:5e:
                    91:3b:c7:15:a9:9c:7c:0c:c3:c0:5b:2e:28:4c:ea:
                    d5:81:27:a6:e9:dc:99:77:39:44:14:4d:81:49:54:
                    76:3d:85:24:d0:db:68:23:ce:d3:a3:de:5b:ff:37:
                    c2:0f:55:13:c9:e7:7c:81:ea:ab:54:cf:99:55:20:
                    97:fb:55:d8:c0:3a:ee:b0:8a:a0:3b:89:31:4d:9c:
                    f2:d4:eb:38:3e:a3:74:b9:cf:2c:8e:6c:ab:97:e8:
                    91:a1:71:fc:40:8f:09:d7:6c:2c:bf:40:15:51:b9:
                    c4:08:1e:14:d6:d4:d4:4b:e8:2f:6c:16:6e:e6:9d:
                    67:9d:a4:95:00:8c:98:f4:a0:e8:99:1a:c9:84:62:
                    7c:47:d5:27:fd:bc:ad:cb:13:19:46:c4:e4:8f:05:
                    ed:fa:67:48:26:d8:a3:30:37:0d:f6:23:17:b6:44:
                    22:d3:ea:e3:30:0d:95:8a:87:46:6a:e0:bf:13:0d:
                    99:85:af:26:60:ee:e9:aa:2b:19:86:98:79:93:bc:
                    85:bd:65:c1:fc:45:56:f3:b4:3e:09:e7:2a:61:fa:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:22:D6:84:75:57:03:39:42:5E:ED:00:8E:39:32:DD:40:8A:42:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:3e:49:8c:e6:fb:ff:29:52:5d:97:fc:1f:15:85:5a:91:b0:
         93:1d:78:dd:ae:31:d6:55:6a:15:81:e4:cf:c9:f3:4f:b2:5b:
         55:53:a5:3a:b9:0d:8b:bd:54:07:81:50:d1:d6:ef:cd:a1:25:
         07:29:5e:1e:80:4f:74:55:f9:72:31:fa:57:75:41:6f:66:51:
         1c:26:8a:10:bb:37:62:84:6d:e0:8c:51:00:cc:19:78:a4:3f:
         f6:5c:da:06:fb:5b:2f:92:de:dd:0e:22:af:6f:b1:f0:21:a0:
         47:19:17:d1:36:45:ee:6e:2b:99:02:20:4d:4d:aa:48:53:03:
         14:e5:6f:8c:74:41:9c:36:5a:b1:02:a1:3e:56:f5:b0:a0:92:
         1b:4e:2f:40:bc:0f:1a:77:26:64:52:b3:01:26:3e:ba:26:b2:
         74:a8:0c:65:94:d2:70:fa:c6:fa:5a:7c:fc:e8:cd:d1:83:66:
         c3:b0:99:e0:92:90:59:46:44:dc:a2:a0:9b:4c:c1:92:b6:81:
         68:73:05:79:fd:2b:2e:50:d1:ff:2b:ac:d0:a1:25:1e:c2:06:
         30:db:83:5e:63:2f:a1:ba:9d:c5:e2:e0:60:fa:0c:2a:a8:40:
         44:62:cc:22:bd:54:e2:81:5f:d5:35:a2:38:b8:45:6e:ec:e6:
         7e:8a:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:48 2026 by rpki-client