Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb657dff-27b1-3856-9aba-52f62c84b1ba.roa
File:                     fb657dff-27b1-3856-9aba-52f62c84b1ba.roa (raw, json)
Hash identifier:          vIwc7R36zw4gSNvCMQg2W0/cT//amBWXpppn00yzk/E=
Subject key identifier:   59:D1:AB:B4:ED:40:4A:CC:97:9D:2F:B1:14:25:63:1C:12:39:7F:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B264FF02342B8000911BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb657dff-27b1-3856-9aba-52f62c84b1ba.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     21313
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:64:ff:02:34:2b:80:00:91:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=76a9ae60-910f-4229-ab91-bf469a6380a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:22:7c:f4:13:dc:8b:e8:97:fa:76:14:dc:
                    03:09:1c:c0:87:d3:cb:ef:a3:9b:bf:4c:bc:65:3d:
                    68:eb:d7:e8:35:27:1b:24:1a:94:08:08:6e:71:52:
                    65:1e:78:92:e0:dd:42:d1:8b:a6:65:84:07:89:bc:
                    26:ec:96:df:a2:49:54:58:2b:9d:06:51:97:4f:13:
                    a8:13:a8:2b:87:85:ae:66:96:58:8b:da:7b:ff:22:
                    ec:7e:8f:a7:f8:6f:a4:f6:f1:07:7d:5c:8a:df:da:
                    95:72:55:ce:3f:38:30:b7:f1:d6:a6:a5:2c:1e:c7:
                    e6:d6:a4:8b:94:43:21:b4:dc:b3:d0:04:7d:0f:93:
                    95:a7:7b:1c:2c:3e:18:0e:03:34:3a:cd:8c:07:1d:
                    d9:20:ba:b5:6d:89:fc:31:91:c7:7d:bb:0b:da:9b:
                    14:9e:8a:1e:c1:e9:4e:7e:14:3d:58:83:45:48:ff:
                    33:2b:1b:d2:9d:92:c1:8c:1a:85:15:b8:b7:40:f2:
                    bd:ab:f7:05:db:25:f4:42:10:97:44:49:15:1c:f8:
                    65:f9:b4:56:fb:fb:19:cd:50:b3:dc:c2:fb:81:2b:
                    1a:a0:32:cc:55:20:f3:fa:12:30:65:55:4a:97:92:
                    74:41:48:1c:40:6a:45:92:2a:9f:20:ec:72:5c:25:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D1:AB:B4:ED:40:4A:CC:97:9D:2F:B1:14:25:63:1C:12:39:7F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb657dff-27b1-3856-9aba-52f62c84b1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:e0:48:a4:9b:12:e5:de:0f:0c:da:f9:ea:a8:6c:5c:88:
         f7:c2:b3:85:fc:86:98:b2:41:a6:ad:3f:d9:29:b1:a5:f1:9f:
         5e:79:51:de:7f:07:cb:92:1a:55:2e:18:f3:1c:72:a9:8a:f7:
         04:cb:ee:f4:48:2a:8d:22:78:bb:95:36:e6:80:0d:5a:69:11:
         ab:02:ef:3a:c1:8a:30:a4:a6:4f:74:37:51:89:03:e6:39:1e:
         f0:aa:9c:db:0c:30:27:a2:dd:e7:4d:98:9c:e0:07:a9:9b:fd:
         ca:d9:76:c1:2a:ed:8a:0e:e6:7c:e1:9f:ff:f1:01:1a:3b:69:
         e6:d8:8a:26:32:8d:1d:7a:06:09:c6:96:4a:8e:13:ad:61:3c:
         b0:7f:af:6a:47:03:47:ac:69:ea:4d:bd:e5:4d:dd:b1:92:5c:
         f8:0e:ee:3b:fd:98:95:02:b4:8b:e8:3b:c9:c0:fe:55:dd:e8:
         4e:14:52:c4:62:31:bd:99:ca:83:e0:75:32:eb:55:3f:6d:63:
         0f:e0:79:89:70:12:f6:b0:50:8b:94:7a:27:c0:c9:c8:54:e2:
         14:65:95:c0:b3:13:43:21:21:7c:b8:84:58:30:65:da:fc:92:
         5d:6a:26:39:7c:28:61:87:19:de:2f:39:67:3c:6f:b4:c5:45:
         2a:90:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:21 2026 by rpki-client