Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7e7622a-a5f7-30b8-89a5-a2c7f6969ed4.roa
File:                     a7e7622a-a5f7-30b8-89a5-a2c7f6969ed4.roa (raw, json)
Hash identifier:          Zvyvn6OaUmY7BzHpLUvZVLChPBHLsr27nkXZH8KF+aE=
Subject key identifier:   1B:68:73:5A:51:9E:FB:AC:F6:F2:2F:58:C9:69:0E:17:52:78:EE:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFB1CFAAD86904F1B53B581E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7e7622a-a5f7-30b8-89a5-a2c7f6969ed4.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     396583
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:fa:ad:86:90:4f:1b:53:b5:81:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=67ed097e-814b-4c83-b0e1-405543395132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:cf:7d:fb:82:7a:5c:31:0f:8e:f0:0a:d6:
                    13:58:17:91:c1:3d:43:f2:11:cf:3e:65:75:91:e1:
                    fc:ff:70:fd:1f:b3:e6:7e:bc:57:cb:ae:67:24:eb:
                    2e:35:4c:91:a1:51:ab:c5:82:56:0c:62:9e:f6:71:
                    cf:06:8c:b4:b7:3d:f4:7f:3a:13:e5:c3:58:23:bd:
                    54:ba:86:71:82:ed:42:ea:b5:94:d4:15:1b:05:0c:
                    56:55:20:ee:c3:d2:78:20:b5:61:7d:d8:a4:c0:77:
                    ad:ad:ed:f6:7e:b0:8e:30:69:82:0c:ae:10:90:7b:
                    54:21:a1:d6:4d:28:30:02:67:ef:cf:c8:17:3c:7c:
                    e5:01:36:fc:e1:75:03:e4:b8:f0:d3:9b:fe:19:9e:
                    36:99:77:dd:5f:67:d9:43:37:0b:41:4f:25:ed:84:
                    fe:a8:a1:99:73:4f:90:b0:19:45:5a:39:a8:8b:38:
                    d7:a7:a0:91:ed:a2:15:ed:ac:5e:b5:7d:a8:9a:87:
                    33:7c:5b:51:91:4b:c3:96:e2:b2:68:1f:ef:23:cb:
                    af:10:ce:22:98:ae:6a:2d:ed:d1:c2:5c:02:db:70:
                    53:c1:b7:be:20:dc:77:b7:ef:89:f2:83:d1:52:d9:
                    fa:f2:58:ac:ba:90:54:c5:c5:65:c6:26:ef:ef:a8:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:68:73:5A:51:9E:FB:AC:F6:F2:2F:58:C9:69:0E:17:52:78:EE:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7e7622a-a5f7-30b8-89a5-a2c7f6969ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:82:05:51:e3:cb:d4:17:5b:79:bb:54:bb:d7:69:8e:21:ad:
         0b:24:32:23:99:2b:82:26:dd:2f:0f:67:ce:d2:59:fb:05:39:
         d5:a8:c4:2a:85:df:67:13:9e:85:e9:4d:b4:7d:7e:f9:17:16:
         df:13:7b:cb:bd:e4:bb:96:c7:d2:be:97:b3:26:a7:e2:1f:f7:
         38:b6:a1:38:1c:61:d7:26:be:bc:9f:9a:d8:1b:05:bd:ac:1c:
         8c:d5:9d:3c:15:a6:04:9d:91:5d:41:6c:69:70:33:9f:a8:56:
         4b:93:8d:7f:c5:aa:14:7e:1e:41:70:28:49:3a:74:a5:c4:c7:
         6c:08:8a:f1:79:00:58:3c:da:17:4a:2e:67:1b:ec:82:65:31:
         da:f1:42:07:9b:a6:70:26:4c:0a:a9:d5:d5:75:4d:d9:f7:21:
         b0:66:33:4a:bf:f4:8a:e4:a0:b5:d3:dc:d5:e5:f5:8f:a4:c5:
         da:81:7b:00:3b:cc:17:e9:86:56:47:9d:91:e1:f7:b4:14:18:
         f8:f2:57:96:2f:8a:1e:d3:09:a7:5b:1f:52:95:50:d5:af:74:
         ac:4f:17:07:89:47:a8:90:0a:26:12:37:c0:f2:4f:01:e7:c5:
         8f:73:6e:46:83:5f:90:e7:f1:d4:f2:c1:fb:0e:4d:2a:58:f1:
         f1:f9:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:46 2026 by rpki-client