Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da684f9b-8bca-31b8-a19d-537e3d2f5e27.roa
File:                     da684f9b-8bca-31b8-a19d-537e3d2f5e27.roa (raw, json)
Hash identifier:          9igk8131FotEf7wROAlrs5CviLdjdv9QpTbuuC+IqLo=
Subject key identifier:   A8:9D:AC:9D:94:26:B3:1C:0D:7B:BA:9D:AE:75:F0:79:C5:FD:3E:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF878E993BCE0A7DFA22D6A20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da684f9b-8bca-31b8-a19d-537e3d2f5e27.roa
Signing time:             Tue 24 Feb 2026 15:18:44 +0000
ROA not before:           Tue 24 Feb 2026 15:18:44 +0000
ROA not after:            Mon 25 May 2026 14:18:44 +0000
asID:                     396587
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:78:e9:93:bc:e0:a7:df:a2:2d:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 24 15:18:44 2026 GMT
            Not After : May 25 14:18:44 2026 GMT
        Subject: CN=b6af2737-5f42-4773-b151-a9e646b7a444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:61:f9:59:a1:f9:a0:26:39:c8:f5:b2:64:
                    45:15:46:a2:05:8d:8f:e7:06:4c:13:bd:f9:29:08:
                    ca:73:68:a7:99:00:75:10:e6:9e:c5:f7:8d:0d:17:
                    cd:3c:cd:0a:71:71:95:82:09:d4:f8:14:23:ce:36:
                    22:87:1f:d2:c6:9f:79:22:6a:a4:72:b2:ff:7c:c8:
                    cf:06:33:0a:33:f0:29:10:e2:4d:46:e5:42:80:2f:
                    70:4d:68:23:1b:27:f2:e9:86:6c:a6:68:65:4a:5b:
                    ef:e8:6c:cd:ea:25:2e:3a:f9:59:74:41:e0:9d:13:
                    9e:2d:8b:c8:21:62:9a:92:c5:b5:9d:73:67:b6:63:
                    8b:4c:e0:fc:b4:ae:88:1b:13:1d:19:35:e5:80:84:
                    f5:e8:f8:47:90:5d:59:24:be:c5:a1:67:c5:27:a8:
                    e1:9b:3c:74:4d:5e:4b:10:74:25:3d:dc:56:8d:5d:
                    72:c7:75:89:5c:13:ba:0a:3f:cf:45:d5:4d:3e:35:
                    af:3f:2d:eb:1e:84:f7:a3:5e:83:11:05:a6:49:10:
                    7f:2f:65:e4:45:e0:3f:cd:0a:11:86:34:2f:1e:7d:
                    16:8f:cc:be:c2:09:e7:15:a9:1c:95:70:48:3e:06:
                    86:db:f3:27:e2:de:1b:ec:7f:58:fd:f9:2a:f2:e2:
                    20:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9D:AC:9D:94:26:B3:1C:0D:7B:BA:9D:AE:75:F0:79:C5:FD:3E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da684f9b-8bca-31b8-a19d-537e3d2f5e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:50:a1:d5:68:5b:cc:8b:bc:e6:43:87:24:cf:d8:19:dd:70:
         32:43:b2:3d:ee:dd:32:72:b8:61:f7:0b:1c:89:c8:6e:30:7b:
         bc:49:87:9e:de:ab:cb:07:6d:02:7d:f2:18:34:e4:a5:c7:af:
         f3:a4:b1:e5:1e:bb:c2:f5:7f:95:9d:59:57:3b:6c:2d:ad:0d:
         9d:cf:3f:eb:31:e8:2d:32:b8:ea:45:f1:1b:97:4f:e3:c3:ad:
         04:42:cf:b8:02:07:ba:f6:25:38:6d:17:5b:5f:91:47:a9:db:
         d5:a2:16:66:87:c4:05:df:b4:fb:ca:de:f8:7b:af:c0:97:0b:
         5d:80:33:02:f7:02:60:2c:95:f7:4a:47:76:9c:53:59:30:18:
         8a:3a:65:7c:9a:d7:70:58:27:65:21:d0:23:b1:f4:f4:a6:e0:
         c5:ee:39:49:a3:83:8e:51:96:ef:b4:b1:5c:50:5a:d0:95:b7:
         fb:dc:d1:c4:d3:0f:a1:50:13:e1:90:cb:d4:0c:7f:8d:d7:30:
         a0:27:cc:dc:22:19:7b:e8:d6:9f:49:d7:43:9e:15:84:3f:d4:
         a5:94:9b:63:57:66:9e:f0:62:e4:5e:6f:24:87:bf:a1:6e:57:
         62:c7:8e:69:55:b0:22:61:34:fc:b1:a5:24:1e:35:c1:e2:cc:
         10:68:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:30:17 2026 by rpki-client