Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99a71d1-01f8-3e1c-b40e-1fcc1a5d6bbf.roa
File:                     d99a71d1-01f8-3e1c-b40e-1fcc1a5d6bbf.roa (raw, json)
Hash identifier:          2I+sitKGKpOJ1Iv7FGGa46IRjq4ztXIMm5YTlnb4lTQ=
Subject key identifier:   A9:94:BF:AD:36:AD:22:5B:EF:2B:2E:C5:FC:0B:C0:59:03:BC:61:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CDB023A8B5E51AEB98E35F840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99a71d1-01f8-3e1c-b40e-1fcc1a5d6bbf.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     397198
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:3a:8b:5e:51:ae:b9:8e:35:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=bfe89b52-65d6-4b1f-a27c-1c809f04468c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:1a:0e:55:8c:f4:e9:3d:b5:ef:b5:fe:08:
                    03:14:b8:5a:94:5e:3b:0d:f9:3e:4c:4a:4b:30:14:
                    db:66:58:de:e2:45:2a:c3:ca:2b:3b:65:85:28:be:
                    a0:de:72:08:40:9b:4c:1a:01:aa:fb:1e:a8:7d:3e:
                    a2:13:73:c7:55:d9:70:07:31:7c:47:54:09:02:b7:
                    c5:b6:d1:dd:46:20:0f:0f:66:16:be:69:f8:e8:f3:
                    10:f0:48:c9:e3:b1:43:fc:82:24:2b:71:19:ad:13:
                    f3:9d:15:63:21:46:eb:25:a5:88:2c:37:69:d3:c0:
                    bd:63:c8:25:a8:9a:33:4a:6b:ee:8d:30:13:7b:85:
                    24:0b:5b:43:21:28:17:ff:10:54:30:a4:94:ff:ee:
                    b5:38:1a:33:5b:0c:5b:78:91:37:c9:b4:e3:74:db:
                    51:f7:ee:91:6c:6d:79:47:98:f0:c0:a3:a3:07:07:
                    3a:f9:f3:82:cf:f4:73:af:d9:f2:8a:39:0c:e0:21:
                    f3:5b:4a:cc:ff:24:8c:af:36:3d:96:fa:05:f5:0c:
                    e2:26:84:82:cb:8d:d0:5d:23:aa:63:ec:3e:1b:74:
                    f3:56:b6:be:a7:38:b9:b9:7b:14:d4:1d:00:71:2a:
                    99:bf:90:14:88:dd:b7:c9:d0:b0:4c:83:ea:04:72:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:BF:AD:36:AD:22:5B:EF:2B:2E:C5:FC:0B:C0:59:03:BC:61:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99a71d1-01f8-3e1c-b40e-1fcc1a5d6bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ed:ed:1c:f0:4f:0f:c1:c7:f1:31:d3:c6:84:e5:2f:c3:0b:
         29:35:75:3f:4c:a6:b6:78:4a:e3:1f:95:c8:bf:ac:9d:7f:1e:
         fd:a1:02:eb:a4:a7:bd:85:50:6a:83:a2:9e:b3:b0:ab:10:5a:
         6d:ed:4b:a7:f4:60:91:b0:21:f4:e4:a6:be:f8:7c:11:48:bf:
         39:bc:b4:90:8f:33:b5:17:ce:04:6f:c8:1b:a5:53:17:c1:33:
         06:90:d0:e1:13:c8:67:e6:67:d8:2e:22:c5:09:df:4d:0c:0b:
         95:2f:b9:28:91:bc:f0:d8:3c:33:4a:42:a6:d8:07:32:34:94:
         78:bf:6b:4c:81:58:43:39:92:ec:01:63:60:63:86:d8:e8:53:
         ad:22:63:3a:00:e1:cd:e1:a2:2d:da:fb:df:e9:1a:81:42:1d:
         7b:64:10:97:52:5b:85:0e:ce:2d:95:6e:26:04:ff:30:3c:27:
         96:b6:6f:bb:fc:a2:f7:11:94:a9:a8:7c:8c:30:b2:ea:32:ff:
         29:5f:d3:03:a9:a7:31:3e:74:c2:f4:3c:7b:35:e8:b2:fe:51:
         12:0d:17:08:eb:9a:f6:d7:2c:2c:d7:9b:ab:a9:34:ff:96:54:
         8e:4e:d3:7a:bb:81:fe:1c:90:4d:ea:3c:29:a0:dc:f5:f3:07:
         95:16:46:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:15 2026 by rpki-client