Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa
File:                     9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa (raw, json)
Hash identifier:          d71dR1RCY4N90Ps8KRLPNYkEBFTgMadi8srEHn9uiQw=
Subject key identifier:   C1:A0:3D:CF:3A:04:68:72:97:E0:32:E4:CB:34:96:CC:BF:E4:C1:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFB1CF855FD35717570314600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     36619
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:f8:55:fd:35:71:75:70:31:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=79e22215-83ff-4fdc-bdb6-137ae4182901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:a3:7d:f9:9d:63:ec:30:0f:5a:a0:9c:a6:
                    89:34:ed:ae:7d:d3:da:17:fd:0e:e9:89:63:f7:ef:
                    32:6b:74:98:59:44:db:dd:2e:76:f9:8b:2a:f3:e6:
                    35:69:31:1b:3a:e3:88:4b:f5:a7:cc:31:62:e2:3a:
                    19:c6:1b:fc:70:5b:36:e6:4e:a6:b6:32:97:59:d5:
                    9b:27:d6:3b:c9:5e:ad:11:fc:35:e5:95:14:c0:e9:
                    0e:17:f8:63:0a:fe:0f:25:2b:44:96:0f:14:80:a7:
                    7b:f1:07:8b:8b:92:ef:40:02:91:12:03:79:2f:65:
                    ce:21:73:60:04:48:00:41:1d:be:5c:32:68:bf:40:
                    28:73:9f:e4:b6:aa:b6:4c:46:e9:53:b7:57:fe:39:
                    da:6c:81:a8:52:50:f4:c9:01:de:de:06:25:c2:ae:
                    57:a3:6e:54:73:1f:f6:fc:2f:ba:06:8a:8f:e9:21:
                    74:38:ab:3a:c4:87:0c:32:4f:25:64:51:e2:5e:8c:
                    ea:6d:31:cd:64:33:88:2b:b7:14:98:38:fa:39:92:
                    c6:e8:5e:8d:ed:6a:16:8d:59:b5:f8:d1:5a:b2:75:
                    e6:1d:e0:20:29:04:92:f5:7e:a2:98:7c:2f:51:9c:
                    c9:5b:1b:24:de:e0:ee:1b:c3:3d:1a:a1:d1:b8:a2:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:3D:CF:3A:04:68:72:97:E0:32:E4:CB:34:96:CC:BF:E4:C1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:a8:7b:6f:60:17:17:0f:79:67:35:f8:40:eb:78:70:22:
         bd:46:cc:bb:1d:41:a5:35:7d:f9:dd:50:d6:51:c0:43:93:0c:
         0b:bc:64:cd:8b:74:0d:ec:d2:e5:46:1e:85:6d:8c:03:f3:a2:
         de:50:1f:b8:22:8d:b2:0e:14:6c:e1:a9:b2:2a:7f:ad:40:92:
         a0:63:f7:67:4a:8e:9f:5d:7f:80:38:5d:8a:05:40:14:38:53:
         0b:b1:52:c8:c3:77:6f:1a:94:06:10:40:b4:99:11:eb:3e:c3:
         22:a8:82:81:38:1f:ff:18:74:4e:6b:f7:a6:bd:7a:c6:1e:04:
         ba:d9:5d:f4:d2:12:a8:0c:1f:b9:f1:19:4f:3b:e7:6e:b9:69:
         dd:21:30:18:9a:fc:8c:ed:b5:e9:8b:db:3b:51:14:c9:26:d5:
         98:d2:34:37:3f:5c:a2:10:69:bf:d1:1b:3b:05:cb:01:3b:fd:
         ae:7b:84:7d:b4:94:07:16:38:74:5a:5e:84:71:0a:61:6b:51:
         ad:41:41:15:ba:0f:37:f0:ab:c5:be:09:77:98:44:e0:6e:57:
         44:b9:56:6a:6f:86:51:a4:e3:f8:29:e0:4c:54:3b:51:83:88:
         67:35:29:c3:ac:15:2f:7d:48:ca:9c:96:9f:20:b9:5f:a2:c0:
         af:76:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:22 2026 by rpki-client