Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07fd2a48-eb92-348f-aa8b-ed6cd329935e.roa
File:                     07fd2a48-eb92-348f-aa8b-ed6cd329935e.roa (raw, json)
Hash identifier:          vOi1m90VChpo1KEy3c42c/qKEFVhk/9NI4a16yUBApU=
Subject key identifier:   69:A8:11:5B:43:F9:26:01:A5:39:8B:2C:10:D0:EC:3C:B7:7B:8E:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4C3D4CB4E4450B13372CEEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07fd2a48-eb92-348f-aa8b-ed6cd329935e.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     36621
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:4c:b4:e4:45:0b:13:37:2c:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=a039cf37-baa5-4bab-9b7a-7566cdb4b805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:da:7f:39:fd:30:77:87:70:ac:ae:f2:60:
                    d0:dd:69:6d:fb:d5:53:5e:83:13:bd:ba:60:b6:f5:
                    08:cc:b2:f5:32:e4:b6:e3:dc:66:21:33:a1:2a:b1:
                    be:55:25:a7:aa:ff:c4:b8:21:92:ab:e5:22:16:c5:
                    39:b4:6a:56:fd:6a:47:e1:08:39:a4:69:1c:77:aa:
                    ab:b4:88:75:8e:c8:7a:0d:44:8a:04:cd:ef:05:4c:
                    7c:11:c2:6e:0b:b4:5a:06:0d:c9:b2:4a:0d:19:ff:
                    8b:6c:04:4c:46:99:08:aa:0f:aa:b3:06:1b:1b:8d:
                    c6:a1:96:06:3b:95:9c:70:72:a5:ac:3b:14:79:db:
                    83:3f:09:8d:49:75:93:bb:b2:6c:57:6a:77:a2:c8:
                    3e:94:71:3e:8e:fa:57:2f:23:f9:b2:77:1f:9a:90:
                    94:f7:ac:ba:25:c6:f6:ba:94:10:2a:e0:b0:33:bd:
                    7f:dd:6e:eb:e0:9f:a6:43:ee:64:5c:e8:3d:04:a5:
                    3f:3d:54:2f:a9:61:fc:bc:ea:0c:c2:1b:70:78:be:
                    d9:34:aa:d2:e7:dc:e9:ef:d3:f2:ce:b0:59:85:85:
                    cb:85:47:5b:b1:ba:7c:94:a8:fc:71:ec:e7:92:18:
                    dc:57:f7:7b:8b:93:64:29:a1:c0:9c:9d:c9:df:b0:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:11:5B:43:F9:26:01:A5:39:8B:2C:10:D0:EC:3C:B7:7B:8E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07fd2a48-eb92-348f-aa8b-ed6cd329935e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:43:b9:31:7d:e7:2c:2f:00:19:41:da:b0:ed:29:1b:ac:7e:
         8e:d7:8c:45:c3:b2:e8:d2:ea:17:f3:63:88:a4:26:54:f0:64:
         e8:f5:c0:63:8e:d4:f7:9c:60:0c:b7:6b:18:41:a9:15:a7:af:
         a5:81:8c:92:13:9e:29:d1:08:c8:7a:2a:5c:34:a7:be:31:d1:
         5c:de:eb:15:db:09:ce:8e:3a:25:12:91:88:a2:7e:83:c5:5e:
         43:67:5b:69:8a:ba:d1:6a:15:f3:c4:1f:e5:e8:73:e8:76:82:
         84:7e:e7:63:16:f7:df:98:c7:26:fd:ed:01:b6:c3:5d:77:21:
         1a:c0:a7:7a:f1:75:15:09:89:32:86:92:4f:bf:3d:7c:91:c0:
         d2:5b:4e:35:ae:39:55:78:82:0a:fa:fb:0c:18:65:dc:1b:ba:
         21:47:82:39:a6:72:1f:f0:1b:c7:f3:48:f9:06:ec:76:d9:03:
         2c:df:39:32:40:91:03:ce:1c:00:d2:19:bd:87:0d:38:3b:8c:
         24:e8:57:5c:3f:0b:39:e5:18:ae:6e:cf:e6:37:94:a5:e7:7e:
         2a:21:03:ea:06:fd:6a:05:ba:24:74:0d:ad:cd:3c:f2:2a:0c:
         db:03:a2:84:79:e5:6e:e1:a7:ec:0f:ce:f8:28:bf:7d:d7:aa:
         48:c1:80:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:10:39 2026 by rpki-client