Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c209e324-7485-32ab-b729-eed7355b60cf.roa
File:                     c209e324-7485-32ab-b729-eed7355b60cf.roa (raw, json)
Hash identifier:          em7CYWTRmTBip15RAkCLzSeZ4WlKWod/l6cqVntPSHE=
Subject key identifier:   F9:F3:12:66:34:29:28:C0:E6:44:76:4D:BB:96:49:2A:8E:09:DD:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFE0B33AB61713B813E15E860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c209e324-7485-32ab-b729-eed7355b60cf.roa
Signing time:             Thu 26 Feb 2026 15:12:32 +0000
ROA not before:           Thu 26 Feb 2026 15:12:32 +0000
ROA not after:            Wed 27 May 2026 14:12:32 +0000
asID:                     396549
IP address blocks:        2001:503:83eb::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:0b:33:ab:61:71:3b:81:3e:15:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 15:12:32 2026 GMT
            Not After : May 27 14:12:32 2026 GMT
        Subject: CN=c1344097-803a-4685-8e80-854250c0a5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:7b:57:6b:43:67:1b:8d:cf:9e:1f:b6:5b:
                    2d:7e:61:3b:f9:ad:e4:b4:42:47:bb:86:9f:5f:87:
                    82:e7:64:c3:13:48:ab:83:e9:03:15:58:07:22:2f:
                    63:30:a3:84:db:87:80:14:fe:5c:87:86:e9:f1:5a:
                    ac:74:4d:e8:2d:0a:6a:0f:57:2b:83:d9:e2:ce:f9:
                    16:0e:e8:72:dd:25:22:c0:ee:22:8d:26:c5:c2:d1:
                    19:b8:eb:af:92:76:ee:bf:66:e0:76:18:e0:4c:19:
                    1a:15:02:13:cf:33:d7:79:61:ec:15:e8:82:ad:91:
                    07:6b:2d:6c:29:f3:5e:c5:c6:39:76:bb:22:b5:12:
                    c9:40:ea:3f:b4:83:71:94:29:58:a9:46:52:17:45:
                    00:29:10:34:28:d4:69:f0:db:65:d8:9b:b4:22:f3:
                    26:d4:f7:50:e2:63:83:ce:e1:9d:e9:f2:94:77:e8:
                    b1:b8:c5:9d:39:2e:37:70:b8:75:e4:79:92:45:f4:
                    7e:6b:c0:ad:99:3e:93:33:ec:fb:ce:b3:97:62:c7:
                    bd:ca:6f:fd:e9:63:21:59:a9:7c:28:1a:17:e2:87:
                    ac:76:ea:8d:96:4f:04:0f:8b:0f:71:87:b3:0a:a8:
                    97:d8:73:01:76:62:6c:28:b7:39:2f:29:a0:f1:3e:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:12:66:34:29:28:C0:E6:44:76:4D:BB:96:49:2A:8E:09:DD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c209e324-7485-32ab-b729-eed7355b60cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:50:f7:64:52:b3:0f:60:11:41:59:83:82:bc:63:8f:16:
         6b:e5:c0:16:b7:4b:ab:d6:f3:1c:8c:fd:07:8e:27:66:74:2c:
         e3:b9:ca:bb:8d:51:b2:ee:17:06:3a:a3:63:45:c8:ec:9d:fe:
         21:3e:f3:a3:c9:5b:c9:4b:1a:73:33:c7:0d:47:72:66:ad:ea:
         2d:d1:23:ab:88:2f:7c:b3:06:f0:2e:20:8a:c8:24:b0:0a:67:
         35:8a:2d:94:9f:7b:af:8c:85:05:e7:a4:bf:0a:6e:aa:f6:29:
         39:30:a6:f0:db:19:07:56:a8:10:15:21:30:8c:38:74:45:9c:
         08:ca:46:85:64:ab:6b:98:00:25:dc:f3:a9:d0:73:93:e0:ad:
         7b:3a:6d:66:de:9e:8e:06:6d:02:4d:15:94:61:fd:b9:76:cf:
         50:d4:84:ea:62:03:73:cb:56:88:77:ae:4c:d9:10:de:d8:51:
         3e:04:92:5e:44:d8:e1:24:19:23:77:cd:93:42:19:cb:38:d5:
         97:df:03:9b:0a:71:a4:a4:bc:67:81:55:f5:10:94:91:11:1e:
         7c:44:0d:a1:f1:d1:93:ae:0e:28:3c:9a:5a:3b:29:a6:ec:44:
         60:f4:0f:3f:ec:f0:9c:05:16:90:7e:35:71:0e:1f:52:f3:ea:
         e5:86:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:57 2026 by rpki-client