Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee438eb3-9d20-33a7-8b15-6d29f00ca634.roa
File:                     ee438eb3-9d20-33a7-8b15-6d29f00ca634.roa (raw, json)
Hash identifier:          juRnBSU+FBvvLVlPIHvz/BTTei2r0bcTIgj5bAOiwxA=
Subject key identifier:   3A:46:7F:55:D6:29:5D:39:35:E0:30:9E:34:40:BB:90:2B:6E:C7:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037D58E9BE0AE24A0216B180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee438eb3-9d20-33a7-8b15-6d29f00ca634.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396560
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:58:e9:be:0a:e2:4a:02:16:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=04e41577-bbbd-4962-a4a9-ca0f99be1764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:c0:d6:c7:23:c4:fa:77:1e:c8:d0:0b:33:
                    50:eb:36:d8:4e:14:af:da:29:44:95:35:4f:0b:98:
                    a0:c5:70:7d:76:bf:da:5b:85:3a:f3:4c:a5:8a:aa:
                    c7:81:3b:15:f8:be:93:dd:94:e5:57:65:70:7c:94:
                    29:1e:f0:ff:57:ac:7c:00:42:b3:06:8c:cb:d3:61:
                    7a:83:7e:23:47:36:27:28:1c:ef:5a:65:3f:ae:96:
                    1d:fa:72:49:9c:d9:15:16:59:eb:eb:c9:30:c2:7a:
                    5f:c7:16:fc:3f:24:5c:22:cf:85:ae:9f:5a:5c:90:
                    dc:9f:3d:e4:f1:1f:5e:b6:58:dd:aa:65:26:59:97:
                    77:39:41:33:c7:1a:12:d4:7d:5b:7c:4f:d1:f2:30:
                    5d:25:cb:5f:a5:a1:e8:6c:43:30:ce:b5:65:0b:04:
                    5f:d1:e5:ab:ec:cc:06:4d:61:14:2b:ea:04:fa:38:
                    70:db:0f:90:98:79:ff:d8:a9:fe:d7:58:0d:17:f2:
                    87:02:62:32:ee:20:10:b2:e6:18:3a:b7:64:da:40:
                    ca:d0:47:4c:7e:2e:70:7b:32:9b:f9:8d:79:f9:79:
                    67:fb:19:fc:67:ce:e8:19:07:d7:7f:74:70:6c:a0:
                    a8:de:ed:1f:ec:77:80:79:e9:78:c8:11:30:24:4e:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:46:7F:55:D6:29:5D:39:35:E0:30:9E:34:40:BB:90:2B:6E:C7:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee438eb3-9d20-33a7-8b15-6d29f00ca634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:76:bb:ce:ea:71:c7:4b:8b:f6:1c:b9:20:36:f0:b1:cf:ce:
         81:f4:78:a1:45:43:67:37:21:3a:d5:2e:2e:43:01:0a:2b:1c:
         af:fa:82:ff:01:5f:80:5b:4c:60:83:52:f7:e7:09:5d:5e:71:
         33:ac:59:ba:f4:93:51:b1:a5:a6:8a:28:aa:de:bc:b9:9c:ff:
         cd:7b:60:63:57:09:97:8f:e5:e5:a5:9c:3b:42:bc:83:89:0c:
         d3:3c:03:4f:66:02:35:5d:46:ea:bc:4f:88:25:4f:02:96:2b:
         dd:cc:f0:ec:6a:00:6c:96:3e:40:67:ef:03:96:a7:ac:5a:f9:
         66:76:3c:7f:b5:2d:6a:6c:4f:e9:f8:75:9b:43:21:9a:63:01:
         90:20:37:a7:82:96:e9:e4:f7:f1:70:5f:03:9f:a8:0c:6b:b5:
         bf:4b:ba:a3:e3:6b:32:c3:ae:f1:1b:f5:9a:eb:24:37:ff:c0:
         49:fd:d1:9e:bc:d3:bf:bd:0e:50:03:b7:19:e9:b3:f6:a0:5e:
         d3:03:03:f4:8d:f9:e2:d4:9b:8a:36:30:a9:e3:ac:e7:17:24:
         68:b7:aa:cc:a6:b3:d5:09:b7:cd:9a:73:89:7b:ee:7e:25:55:
         6c:5e:41:4d:eb:9a:bd:a2:d2:d3:d4:1b:04:6e:83:7d:a7:a7:
         3e:b3:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:42 2026 by rpki-client