Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa
File:                     f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa (raw, json)
Hash identifier:          Bz/fdAd9fb08oCzMYPfxsmAr4R3qDKT++CHhT0wFjrA=
Subject key identifier:   B4:38:46:4E:BE:C7:7B:98:81:21:15:A9:70:08:8F:22:C1:62:C5:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEFF23069C9A1C1E48EA12260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     20431
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:30:69:c9:a1:c1:e4:8e:a1:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=077a3d30-cd5e-4940-9ff2-5a632cd93b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:e5:c9:02:16:10:a7:c6:ed:ab:e0:9a:aa:
                    96:1b:0a:7c:e1:47:1e:1d:68:fd:97:d5:73:f2:70:
                    a8:cc:f2:8e:ba:61:14:85:dd:a2:b1:cd:6d:bd:32:
                    6a:2e:49:e0:a0:16:84:5b:3d:6f:0b:67:86:89:b7:
                    1e:eb:f5:76:c4:bd:a1:98:fa:e1:b2:b2:ce:8e:f5:
                    d1:d7:99:a7:b1:b8:cf:4c:24:df:22:21:34:20:49:
                    58:1a:85:11:4c:e8:65:35:b2:11:71:c1:39:b4:95:
                    ea:6a:70:6c:3b:b4:dd:ea:e6:bb:1c:70:b6:b0:67:
                    e6:0d:32:a2:60:c8:d4:61:33:63:14:70:fb:98:f1:
                    6f:43:c0:5f:99:57:54:d6:61:f5:f7:5e:3c:f3:31:
                    d4:36:9d:cc:a6:e1:8e:85:32:86:4c:8c:a3:50:11:
                    71:97:d9:77:10:6a:b7:c9:ad:e7:c6:ab:83:00:6a:
                    05:f6:71:9b:5a:e5:90:c3:0e:a7:1d:c6:f4:01:5f:
                    b8:29:41:eb:ec:a6:a2:6b:16:d0:9f:a7:16:39:96:
                    36:dc:11:08:96:75:4a:a0:b9:15:bc:00:aa:7d:0b:
                    c8:21:1f:ed:0d:55:94:ad:9c:1c:04:23:89:ff:c4:
                    3f:79:8e:0d:19:7a:8a:95:a7:a3:36:8b:3f:f7:10:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:38:46:4E:BE:C7:7B:98:81:21:15:A9:70:08:8F:22:C1:62:C5:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:75:fb:f6:60:03:6a:b1:56:e0:30:c8:3c:59:b9:25:c9:
         88:56:6b:05:53:43:48:5b:1d:f8:8c:c1:b3:8a:3f:77:ce:1c:
         32:51:1d:13:59:cb:49:8a:1d:c5:60:c7:57:cc:f9:65:27:db:
         08:7d:72:e6:54:b3:c1:c9:20:a0:2b:d1:16:56:bd:fd:07:a8:
         a9:28:23:1b:80:a9:0a:00:ef:bc:74:34:3c:5c:81:cf:64:36:
         1b:76:5d:f9:90:46:1d:4f:3c:a2:1a:54:91:fc:e2:de:a3:59:
         43:0c:ab:fe:32:e8:b5:f8:d0:c3:d1:08:3e:9a:ae:8c:ba:47:
         f4:6c:47:f1:6a:bc:89:25:8a:be:17:23:68:ce:32:24:35:da:
         8b:93:6d:3f:e6:8f:a5:36:ae:91:bb:ce:7a:75:3a:c0:dc:d0:
         95:c8:bc:2c:3d:dd:45:2d:b6:06:e5:eb:ad:ed:58:c5:6f:e9:
         76:53:93:8d:e8:ec:0b:b6:fa:ab:aa:44:07:52:be:cf:f0:67:
         c5:88:d1:8a:86:55:b8:7e:72:30:e4:7f:91:94:53:5b:cf:67:
         8a:b7:57:2a:c5:53:33:6c:13:09:7d:4f:60:5d:52:3d:8b:c1:
         13:dc:5e:e6:c1:25:35:78:d4:44:86:a9:b0:b8:8b:26:ee:0d:
         4b:20:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:38 2026 by rpki-client