Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ba72117-89c8-377a-90ae-e4f952003aa9.roa
File:                     0ba72117-89c8-377a-90ae-e4f952003aa9.roa (raw, json)
Hash identifier:          cd+VU/d/uw6EERZjWQx7qe66TOgJ7Dewi//MNfMriqs=
Subject key identifier:   3B:F6:85:65:B4:EC:70:E0:3A:6A:AD:C6:BE:63:80:3E:58:39:81:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79A0BE88C98CFD4FCDDF7E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ba72117-89c8-377a-90ae-e4f952003aa9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396593
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:0b:e8:8c:98:cf:d4:fc:dd:f7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=21910807-d066-445c-8d40-7f4bcd10d1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:4e:39:ee:04:b3:0c:c8:51:d7:58:0d:7d:
                    cd:34:99:a9:76:3d:c0:06:71:17:c3:eb:f0:87:e8:
                    c0:05:ff:06:8a:1e:c3:7a:b4:69:4d:7d:63:a8:49:
                    2f:3c:00:9b:0b:44:da:03:cd:7b:0d:ca:64:19:cc:
                    11:12:94:41:39:8b:ad:0a:17:3f:82:aa:74:6d:2b:
                    22:8a:64:59:62:43:70:31:a5:27:97:b9:2a:74:7a:
                    4c:56:2d:b5:17:ae:be:68:bf:6e:a0:26:ff:c1:6e:
                    81:16:4b:89:43:8d:58:43:0f:11:d8:22:f3:39:b6:
                    37:eb:1e:ef:60:92:a7:18:2b:81:36:4f:08:5a:9a:
                    81:62:3a:6d:a7:ad:76:f4:cc:47:f4:8d:1a:1e:44:
                    28:90:a7:3d:a6:19:ed:06:17:7a:be:ad:ae:7b:90:
                    8f:61:d7:60:c7:b9:80:c9:c7:98:96:bd:1b:50:43:
                    96:d6:1d:d2:1a:03:bf:f2:7c:6b:d0:cb:94:10:24:
                    bc:68:62:eb:e9:a9:3e:cd:06:04:9b:e8:e6:55:9e:
                    88:3b:7e:b3:16:fe:03:a3:ae:14:bc:cb:f2:3a:60:
                    cd:9e:31:cb:f8:8e:a5:cb:52:aa:b0:bc:0b:a4:7d:
                    7e:62:05:bf:3d:a9:58:f1:88:a7:43:b0:a5:33:5b:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F6:85:65:B4:EC:70:E0:3A:6A:AD:C6:BE:63:80:3E:58:39:81:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ba72117-89c8-377a-90ae-e4f952003aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f2:96:16:89:9a:9a:8e:3e:14:69:99:c0:ee:09:de:c2:14:
         11:26:f0:01:6a:fb:e3:67:4e:20:3c:51:7c:3d:f3:75:56:f5:
         73:61:d6:f6:e1:c6:05:ab:80:85:69:fd:2b:52:67:c5:2d:cf:
         f1:4b:e0:5c:82:50:55:92:db:93:02:38:80:ee:de:b9:f6:63:
         2f:46:a3:07:76:a1:51:6a:14:4d:64:8e:bf:dc:85:a8:bb:8c:
         f4:4a:85:45:fb:93:86:79:c1:f8:03:3f:9c:96:ec:ce:75:dd:
         35:00:66:46:68:3b:4c:50:ce:aa:7f:c6:1c:03:cd:6b:d1:b6:
         04:3e:24:e9:e2:2c:18:84:c9:52:fe:92:e0:fc:67:5b:18:b7:
         5e:6d:99:be:cd:00:a4:0a:84:23:ab:b2:ff:d0:31:b4:47:8b:
         54:2a:e3:85:c3:ff:83:af:ab:07:27:af:f1:28:25:86:39:67:
         ae:63:60:bb:b0:af:10:b3:d6:b1:8e:8c:61:89:ab:ec:29:2f:
         20:9f:bc:38:3c:4c:4a:eb:58:c5:3c:7c:aa:82:41:f2:49:4c:
         bc:05:de:9d:d9:1c:17:23:79:4e:48:35:27:99:9e:a1:ba:16:
         a9:49:0a:a2:71:6c:44:c9:89:bc:1c:5b:eb:b3:4f:cc:3c:ce:
         fa:6b:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:38 2026 by rpki-client