Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34247ac-4af8-3983-93db-e3745cb932c5.roa
File:                     d34247ac-4af8-3983-93db-e3745cb932c5.roa (raw, json)
Hash identifier:          N2PStV5LsnIqDUuVltehb9KMWDlFtJlHYyQe2SUCdI8=
Subject key identifier:   49:C2:3E:A8:1C:91:22:4B:45:72:41:E8:B5:94:E0:8E:E8:26:C9:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CDB023D2B080E6CAF0A13AA10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34247ac-4af8-3983-93db-e3745cb932c5.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     396603
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:3d:2b:08:0e:6c:af:0a:13:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=dddaadfa-8526-4c47-988e-aee42fc1a8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:c0:90:b6:3b:77:cd:48:de:c8:ff:c6:fc:
                    c9:91:d0:26:b4:a4:cb:bb:ec:37:5a:fa:37:ed:c8:
                    98:3f:d9:68:97:6e:46:25:d0:10:80:42:5b:5f:57:
                    b9:b3:ac:c9:d9:40:8a:65:e2:7b:61:94:ba:cc:c7:
                    dd:57:a9:06:96:7a:88:d8:0a:2d:5e:c9:27:68:85:
                    a5:22:8c:61:6f:74:5b:0a:d5:a7:7b:1b:eb:2b:b7:
                    27:f7:c8:8f:b6:ba:60:73:05:93:0f:c0:f4:38:00:
                    8e:33:27:eb:2a:10:9f:0b:6d:7d:6f:15:33:92:8e:
                    61:32:b2:46:27:08:9c:61:9d:da:6a:eb:0a:9e:4d:
                    66:13:8e:1f:0a:4e:ff:06:9b:a2:60:24:92:1f:ad:
                    3f:8f:9f:52:30:f2:69:af:7e:14:a7:0f:ec:64:17:
                    62:f8:68:ed:41:e4:b6:f3:51:80:23:45:40:06:a0:
                    b6:e8:a2:bc:ed:f4:de:51:8e:d6:ea:ba:ee:7d:46:
                    3a:51:57:36:21:c7:2e:78:25:a9:37:56:fd:fd:09:
                    8c:7f:3a:4b:c6:c5:89:25:1e:83:f5:c4:7c:06:53:
                    70:bd:a2:07:01:a9:5d:a1:c4:35:73:61:a3:6a:36:
                    ac:25:0d:b0:59:66:64:28:28:a2:32:c4:fc:db:c3:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C2:3E:A8:1C:91:22:4B:45:72:41:E8:B5:94:E0:8E:E8:26:C9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34247ac-4af8-3983-93db-e3745cb932c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:da:8f:15:ce:d1:15:3f:99:39:e3:26:7a:0f:d7:b6:d7:c5:
         8c:b2:2f:61:6d:29:a7:a9:77:e4:7a:bd:46:99:31:ed:0b:d5:
         35:35:5f:6a:d9:72:14:e6:40:e8:40:60:9f:bb:d3:53:1f:f1:
         85:c6:65:c8:53:38:4b:9d:6c:9c:bc:12:a6:cd:44:1f:df:3f:
         ef:7e:36:e5:0b:84:1a:11:bf:1c:15:ed:ec:c0:bf:89:2e:83:
         e8:bc:55:e2:f6:0e:45:50:de:80:0a:b6:0b:97:af:73:be:88:
         ec:20:27:c9:59:6b:f6:27:95:70:d4:f5:f1:4c:fc:cb:10:48:
         30:53:f1:76:d4:ea:70:a1:69:96:b7:24:3c:75:39:9f:a6:c6:
         f7:16:bc:01:c2:46:85:a4:7f:23:36:8f:c2:e7:05:11:50:b9:
         f8:98:19:a4:b3:ab:24:df:56:40:54:df:a8:9d:95:ae:3c:91:
         b9:8d:92:c3:e1:63:56:5c:3a:bd:65:88:26:db:80:02:d8:0a:
         68:09:b2:f7:2d:0f:ec:4c:98:c3:27:37:e5:ab:3d:95:75:51:
         95:ae:62:42:6c:c5:09:95:89:89:d0:92:18:43:6f:c9:43:55:
         2c:77:83:d2:61:b4:ea:6c:5f:88:60:5b:3d:0e:03:64:d5:e0:
         19:04:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:11 2026 by rpki-client