Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c17b9-258e-3eda-a672-099869c54464.roa
File:                     eb2c17b9-258e-3eda-a672-099869c54464.roa (raw, json)
Hash identifier:          3DkEs7iI/wYDRKuILlhCeFGO3AcyN/SiYmYG0cNjr3w=
Subject key identifier:   62:64:BB:0C:94:52:B9:15:A0:75:1D:43:97:4E:74:0B:D5:20:CC:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D59EAAF158303198776485900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c17b9-258e-3eda-a672-099869c54464.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     396552
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:af:15:83:03:19:87:76:48:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=9ba2815b-57be-4aab-8ccb-d918b77541fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bc:fd:c8:79:4b:e0:65:ac:90:6b:eb:f4:6e:
                    90:ab:cf:d0:d8:9c:eb:ee:08:11:08:ab:ee:a0:4a:
                    54:eb:51:cf:16:31:26:28:6c:f8:a2:24:c7:c2:00:
                    2a:b1:dd:7b:c8:a7:b8:ad:d7:ac:64:1f:b9:18:db:
                    42:21:64:f3:d5:c1:0a:b5:c2:58:2f:2c:38:ee:70:
                    77:8f:6b:b1:73:55:03:a4:63:e3:92:48:72:72:8f:
                    da:4d:af:15:b1:2c:55:6a:10:ac:9d:d6:38:ec:b4:
                    7f:fc:69:e4:17:b7:49:7a:27:93:61:83:ae:af:2c:
                    b7:11:2c:a8:e5:6e:e1:a9:7c:27:4c:0e:14:07:46:
                    30:1a:0f:da:9c:c4:fa:10:84:fd:f3:70:cf:77:34:
                    c5:5c:93:ad:fe:13:f0:e4:13:2b:c9:22:82:5e:7f:
                    f8:6f:30:aa:d1:45:d6:17:10:0f:cf:1d:b6:0c:8b:
                    79:0b:7e:36:22:94:7a:4b:de:b9:9a:81:29:5f:69:
                    a0:10:b1:c5:b2:98:85:36:bb:67:67:42:1b:68:02:
                    11:8e:d9:3b:4f:f7:d8:fc:0f:48:74:b2:3a:77:1d:
                    77:0d:c9:ed:2c:2a:8f:34:b6:8a:a6:a0:f8:11:7b:
                    bd:a9:3f:48:56:51:d4:73:41:d6:1f:b5:74:e2:9e:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:64:BB:0C:94:52:B9:15:A0:75:1D:43:97:4E:74:0B:D5:20:CC:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c17b9-258e-3eda-a672-099869c54464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:64:75:83:d3:2d:69:e9:45:0a:97:cb:70:12:20:f6:01:fa:
         f1:16:70:b6:b3:bd:e9:f8:f7:01:6e:25:46:80:ad:de:c8:f0:
         b7:1f:f3:91:fc:91:25:2a:c6:8b:7e:f2:dd:2d:e7:42:90:80:
         52:a9:1f:c3:06:d9:51:52:1f:35:c7:23:0c:f6:e5:e6:45:4c:
         6b:7d:31:c6:31:56:5b:e9:87:ab:a1:40:4b:16:e8:17:ab:b6:
         a3:24:84:31:bb:40:58:68:ed:f4:ca:7f:40:72:20:00:5b:20:
         b4:4e:bb:df:a7:a1:3b:2a:ea:86:91:02:68:3f:b6:a8:83:1e:
         7f:45:e1:06:7f:de:6d:57:7d:5c:a0:48:1e:2d:be:21:df:af:
         ad:b2:02:8d:59:b7:9b:0e:c8:1c:6c:9a:7c:6a:b3:d8:b2:8f:
         dd:0d:d7:db:a2:cb:67:14:09:b0:3d:24:11:d4:d5:84:5b:6f:
         3f:72:91:26:09:74:9b:35:02:63:99:ba:df:60:7b:58:40:7c:
         a1:b9:d2:6c:ff:2e:cb:40:c8:65:89:4a:18:8f:10:45:75:d2:
         60:ba:3a:05:b9:be:b7:2c:42:f8:18:f3:a4:47:f6:31:dc:0c:
         ce:71:a3:5c:ef:75:dd:7a:c0:7b:2b:f7:2a:e9:ce:46:91:c8:
         f5:f0:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:00 2026 by rpki-client