Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae56ecf8-21e3-3d43-90b2-60c04a478cd7.roa
File:                     ae56ecf8-21e3-3d43-90b2-60c04a478cd7.roa (raw, json)
Hash identifier:          P/BBEBLp19gHvsWGvwCgeRQ1N47nHfrSiTC3ZEhVMuE=
Subject key identifier:   CF:38:22:53:75:C2:B6:F2:03:E3:58:82:00:CD:E8:24:D3:D3:39:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B2991E4BB357E5E0B99040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae56ecf8-21e3-3d43-90b2-60c04a478cd7.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     36628
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:99:1e:4b:b3:57:e5:e0:b9:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=f699a21f-69e2-4f00-b952-c1dc3902c243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:fc:34:0e:34:ae:9e:4e:19:f1:ca:18:d5:
                    0b:c2:92:a1:ea:3f:7b:4d:27:04:c1:3d:75:5f:22:
                    b1:26:7a:df:a6:de:4b:e6:1e:06:fd:1e:2e:9d:8d:
                    27:a6:14:60:c3:61:ab:31:ee:01:cb:87:37:d1:1d:
                    e2:24:7b:8d:71:80:6d:fc:be:f0:b2:64:bb:7b:a2:
                    f2:60:15:76:96:7b:5a:68:9e:d1:5a:a3:fd:01:13:
                    e2:6f:8b:25:53:30:b9:49:d5:b5:f6:7c:32:12:d6:
                    e3:5a:ba:c8:d3:d5:cc:de:de:58:fc:9d:3a:67:52:
                    3b:60:4b:d9:d3:bf:f3:cd:d0:12:a0:f0:f6:70:5c:
                    c3:64:7d:83:41:89:fe:48:17:00:cf:e2:a1:35:de:
                    89:5c:6a:ef:d8:8f:6f:15:db:a7:f4:f8:ee:d4:ac:
                    f2:c3:bc:98:04:f6:fd:37:73:00:f6:2d:15:92:59:
                    f9:eb:15:8e:9a:7b:60:23:da:05:1c:20:7a:68:a9:
                    20:94:4a:9a:44:7d:15:ac:4a:b7:1c:30:db:be:6e:
                    6f:95:9b:d1:8a:bf:23:dc:95:49:86:b6:c2:30:ac:
                    42:58:7d:ba:84:49:fc:eb:c7:23:6c:8e:ae:da:91:
                    19:2b:3a:13:c3:5d:48:09:d3:50:b9:18:00:f0:2c:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:38:22:53:75:C2:B6:F2:03:E3:58:82:00:CD:E8:24:D3:D3:39:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae56ecf8-21e3-3d43-90b2-60c04a478cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:2b:09:1d:fb:87:9b:86:f6:57:3c:7b:6a:53:fd:fb:ee:
         c7:71:87:a6:5d:1f:c9:f6:5d:b4:01:31:eb:dd:48:46:be:a6:
         8b:06:91:ba:04:3f:4d:a8:dc:8b:ae:48:36:eb:f7:41:a3:e7:
         25:46:60:dd:df:7f:6a:de:9b:8c:e1:66:c9:36:39:44:78:f3:
         ed:cf:d0:a3:98:c4:c0:a8:1a:fd:1c:0b:2a:10:b2:ed:7a:85:
         75:bf:6d:55:ad:c9:45:06:dd:99:4c:93:fa:f3:89:a2:5f:6b:
         7c:0c:22:d1:9f:81:f0:a2:8c:fa:54:42:bf:35:d4:b7:8a:36:
         ce:09:f0:6b:a4:15:d8:3a:02:d6:a4:58:e1:f9:0d:0e:68:f9:
         cc:5f:b7:8b:c6:e3:3c:56:80:98:2d:5c:e8:02:89:88:a6:38:
         99:0b:31:44:b8:1c:e9:68:12:ba:fc:b7:17:fc:5c:64:e3:76:
         8f:26:b0:7c:c2:be:2a:af:c8:85:05:7c:8f:f4:b8:43:ad:6d:
         c3:cb:3a:63:57:90:db:1f:6a:71:bf:1a:c3:b8:e2:19:a4:72:
         71:7e:dd:ae:22:c4:6e:74:d3:36:ce:fc:35:4f:6f:d7:04:7c:
         36:07:9f:1d:c4:9b:90:2b:a2:3d:f9:a4:8b:c6:73:0b:c6:b1:
         8d:f3:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:35 2026 by rpki-client