Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58a4654-6c0c-3c45-ac3e-a57e9bf3a6f4.roa
File:                     a58a4654-6c0c-3c45-ac3e-a57e9bf3a6f4.roa (raw, json)
Hash identifier:          jf1E15BDylf92JKXYl03V/kUKHnzBvkKoGaWu8rrXHI=
Subject key identifier:   51:2E:DF:A3:0A:C6:46:15:7D:D9:13:E3:89:FB:E5:BA:D4:25:A0:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF878E7892456B416ECE61348
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58a4654-6c0c-3c45-ac3e-a57e9bf3a6f4.roa
Signing time:             Tue 24 Feb 2026 15:18:43 +0000
ROA not before:           Tue 24 Feb 2026 15:18:43 +0000
ROA not after:            Mon 25 May 2026 14:18:43 +0000
asID:                     21313
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:78:e7:89:24:56:b4:16:ec:e6:13:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 24 15:18:43 2026 GMT
            Not After : May 25 14:18:43 2026 GMT
        Subject: CN=b901c6f8-50a1-44c8-9fed-420aba3bac18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:7e:15:2b:bd:0b:47:44:2b:49:f8:0a:2c:
                    50:1f:8f:cc:14:74:d1:b3:b9:f3:a6:08:0e:20:7f:
                    c1:7e:53:96:3a:c6:f9:79:c3:73:4f:7e:d3:fc:3d:
                    f0:64:4d:fe:d7:7d:82:a5:bd:87:e9:61:f0:e7:03:
                    96:41:96:52:05:f9:be:ba:32:cb:54:cb:cc:2b:ff:
                    f8:4f:02:c3:c7:6a:32:06:9c:86:59:e5:6d:b7:28:
                    4e:e8:ee:fe:6c:e1:7a:12:9f:06:e5:e5:10:44:05:
                    07:4b:e2:13:41:6f:16:15:b4:8d:a0:25:b7:81:a2:
                    ea:6f:e2:99:fc:06:e9:6d:05:a5:2b:af:1a:a5:f1:
                    7c:17:76:b2:0b:d1:94:fb:3a:9e:53:2b:50:55:39:
                    f2:51:01:6e:da:3a:26:5a:f6:59:a3:74:eb:a4:8d:
                    aa:2b:4b:fb:7b:09:96:e5:53:1b:52:fa:90:88:4d:
                    c1:e9:4a:af:58:af:b4:c9:08:11:37:46:7c:dc:2c:
                    90:cc:9e:18:38:7b:db:fd:85:30:1d:5b:75:77:37:
                    47:54:a4:3c:d4:1e:06:8a:fc:0f:3c:63:f4:6c:51:
                    21:ed:d6:9d:7d:f7:92:d4:3d:04:d1:58:a9:87:2e:
                    a5:25:0d:dd:2d:c0:1a:b6:6f:82:0f:b0:30:73:97:
                    d3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2E:DF:A3:0A:C6:46:15:7D:D9:13:E3:89:FB:E5:BA:D4:25:A0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58a4654-6c0c-3c45-ac3e-a57e9bf3a6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a0:8d:33:b0:a6:87:86:a2:e2:13:bc:de:57:11:89:cd:5d:
         03:84:3b:c7:60:15:74:d8:e2:16:e6:58:4e:ec:fb:2d:98:8d:
         53:19:9f:6f:bc:80:06:e3:76:95:fb:f8:36:59:26:d3:74:ad:
         95:fc:46:33:3a:85:b1:4b:33:17:95:28:ec:b2:2b:6f:42:39:
         cc:98:e2:cd:e7:f0:e6:b4:11:cf:5f:b8:6f:a1:5d:d0:d9:47:
         98:3b:e2:92:9d:4e:6f:a9:49:a1:67:fe:2c:d8:ee:47:85:99:
         9c:5e:a8:40:da:1f:6c:a1:21:94:13:d2:3b:12:74:fd:25:de:
         54:c6:d5:6e:6a:87:70:4b:d4:6a:82:53:cf:1d:cd:5e:0d:e8:
         a3:14:9d:3d:e6:bc:d6:2d:be:ef:60:93:9f:34:85:13:e2:e1:
         70:b7:40:16:34:6e:3c:df:a3:4d:63:5b:60:db:2a:ba:dc:7e:
         39:e8:4c:65:35:99:85:c4:88:79:6b:15:f3:b8:1b:fc:be:32:
         f3:5e:7b:d7:87:c5:bb:be:fd:d3:c2:61:78:a6:ab:c5:ca:ce:
         3d:cf:85:44:9a:e5:fe:95:b3:bc:f1:c2:c0:ec:20:56:c8:56:
         01:1c:48:ee:0f:ba:14:81:7c:aa:12:d3:82:eb:98:ae:a7:85:
         0b:1c:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:21 2026 by rpki-client