Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa
File:                     ac1d5574-16a1-3235-abfc-f3d832bc5707.roa (raw, json)
Hash identifier:          qSEmFW21/qx5kr/8AL2abVDKrdxu01TMRWTV/lgDkoM=
Subject key identifier:   C0:15:7C:D2:E8:60:2A:07:77:B1:80:B8:51:1B:50:D2:5B:77:B8:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CED27BA48FC49256B8D9E4480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     397209
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:ba:48:fc:49:25:6b:8d:9e:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=d4e3d97b-b02b-40a1-a1f4-4b09da3d276f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:a6:14:de:b1:33:15:75:76:58:2b:4a:c4:
                    e3:6b:5f:65:c5:dc:11:27:bc:6b:d8:72:3c:4e:51:
                    67:bd:26:3c:ad:5c:b8:4f:2f:1a:18:b1:a3:9c:e1:
                    f8:e8:65:9b:59:79:5b:df:be:fd:ef:70:73:09:04:
                    cb:ae:79:64:cc:50:50:d0:14:e4:1e:d2:8b:88:00:
                    a6:ae:e2:86:63:13:2a:29:b7:fc:2d:64:69:fa:94:
                    07:19:ed:5d:c7:e6:dc:07:dd:f6:cf:be:56:14:81:
                    0c:9d:cd:2d:23:8f:28:bf:d9:0f:5d:9e:99:2d:ec:
                    84:c7:30:83:c1:ee:ba:db:ed:fd:01:18:81:43:a4:
                    45:56:c2:ff:d8:f4:47:06:71:78:35:fc:fe:61:29:
                    a7:fb:f0:93:de:64:ee:ef:0f:94:e1:f8:4d:f7:8d:
                    9f:11:e9:b7:ba:53:3e:0a:cb:67:eb:b4:a0:28:5c:
                    08:33:5e:c0:1e:05:c5:04:ab:eb:f7:a0:f2:3c:75:
                    e8:61:e9:1f:94:d0:30:b8:e1:6c:61:03:44:5c:66:
                    13:63:3e:00:60:66:56:18:d3:44:ce:b8:21:22:27:
                    17:8a:60:4a:81:64:9e:a6:e6:33:8b:2a:ad:67:39:
                    8e:73:3b:85:86:53:76:66:7d:4e:81:de:35:e8:3c:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:15:7C:D2:E8:60:2A:07:77:B1:80:B8:51:1B:50:D2:5B:77:B8:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:90:bd:8d:2c:91:65:58:3e:80:5e:e1:65:95:97:b4:7f:
         7c:f5:68:00:24:f0:ed:26:53:5e:b3:a7:3b:d7:e9:a2:88:e8:
         2f:e0:71:c4:af:e7:b9:02:a2:c2:91:fd:c8:8a:1a:5d:a9:19:
         fd:c3:ef:fa:90:19:13:38:3c:f3:68:16:63:94:8c:50:a5:e0:
         a0:e0:af:1e:5b:21:4a:ad:d3:83:36:8f:bd:21:d0:d0:3a:15:
         f7:f5:45:2d:96:a7:81:9c:03:4e:a0:7d:dd:d7:37:ee:bd:87:
         73:9a:e9:a3:b0:f2:49:16:bb:ac:98:5b:db:f3:46:3d:80:a9:
         a9:78:2f:ba:a9:8e:51:7e:1a:da:e4:ad:b0:31:1d:f6:67:af:
         16:33:13:a7:92:2f:b1:f8:1b:38:f2:f2:af:c9:33:d1:f2:1e:
         a3:8b:81:43:70:cd:c3:4d:77:b1:0c:ef:6f:3e:d2:e4:bd:e2:
         cd:b9:64:5b:03:dd:9f:75:2b:f2:ea:a2:9d:c4:1a:a3:70:f9:
         c1:9d:df:50:56:6e:96:cd:72:87:92:30:2e:bd:14:ac:7d:04:
         c9:1b:d6:29:d2:d2:d4:13:97:1a:82:b7:a2:37:3f:01:f7:2b:
         a5:a2:bf:b0:f9:77:cf:0f:07:49:2f:35:3f:c5:0c:4d:22:aa:
         35:27:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:25 2026 by rpki-client