Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1937cdfa-8587-3bdb-9f77-044260e471ec.roa
File:                     1937cdfa-8587-3bdb-9f77-044260e471ec.roa (raw, json)
Hash identifier:          RNfFrWOJT0DghXyMGvLDIbPzy0QHneAz3DV0ZUsxWjI=
Subject key identifier:   05:B4:46:4E:02:22:24:0B:70:46:B3:96:F9:E2:EA:5A:C2:C9:BC:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE0C21EAFCA33FAE4E3401700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1937cdfa-8587-3bdb-9f77-044260e471ec.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     397198
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1e:af:ca:33:fa:e4:e3:40:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=dee707c2-1ec0-42d1-8607-abc620f37692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:ef:40:dc:6a:d8:c9:62:52:0e:c7:03:e4:
                    9d:28:8f:85:b7:ec:e5:1e:88:69:e0:bf:46:41:9f:
                    ef:24:92:a4:46:9d:0a:52:67:ff:02:07:7d:21:81:
                    80:60:2a:34:97:91:9d:7c:f0:b2:e0:f7:bd:47:0d:
                    a6:2a:9e:c4:bf:21:08:f3:a1:27:28:64:76:d7:e9:
                    01:c5:81:bf:ce:72:cd:c2:14:8c:5f:cd:12:ae:ae:
                    5c:f5:ec:df:95:3c:c8:e3:b1:45:48:d5:41:ca:52:
                    09:2c:69:f5:12:56:e7:a0:52:57:1c:8a:12:3d:ee:
                    d4:77:c6:34:b8:66:89:f6:47:e9:e0:53:71:4d:92:
                    46:4e:b5:7b:10:9b:74:c0:b9:71:24:5a:49:be:f7:
                    95:f6:d9:27:5f:d2:2d:22:79:86:99:c9:8d:a3:22:
                    bf:e6:0f:39:fe:9e:22:47:2d:7d:b2:36:35:52:27:
                    56:4a:ed:ff:57:2c:c2:47:7f:35:58:83:4f:8e:c5:
                    b3:e5:f1:14:fc:c5:11:d8:36:fa:11:c9:fb:07:fc:
                    7b:c0:a6:eb:39:fd:49:39:15:5b:38:4e:79:e5:71:
                    74:14:2d:be:e1:b2:25:8f:5f:4a:f6:df:81:8b:21:
                    2f:fd:8b:50:f4:c1:a8:f6:d1:8e:33:b8:12:4a:34:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B4:46:4E:02:22:24:0B:70:46:B3:96:F9:E2:EA:5A:C2:C9:BC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1937cdfa-8587-3bdb-9f77-044260e471ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:ba:78:a6:1e:81:04:4b:17:e1:40:50:e0:27:00:b2:c6:
         b3:2a:44:50:7b:fa:a9:f3:e2:a7:fd:96:54:6e:33:4a:b1:c7:
         eb:16:f6:dd:73:9d:1f:d7:7e:ea:83:67:56:d9:1d:bf:a4:57:
         db:52:ad:78:f9:a3:42:8a:10:ef:9a:2f:74:4a:31:42:2f:76:
         c4:19:e0:25:cb:0a:e5:5e:84:96:d3:17:ad:c0:ee:73:13:1a:
         3e:c7:f7:cf:78:47:b2:4c:ed:48:76:67:5b:bf:47:aa:6b:37:
         2e:c7:5e:a9:af:37:5c:57:56:6b:68:d2:de:fa:11:23:ca:d1:
         00:4e:0c:0f:73:f4:19:5b:a4:dc:83:52:53:3a:5e:7f:0a:5d:
         71:fe:e2:7b:71:f3:ad:32:7e:9a:5c:7b:ec:7f:52:21:c9:2e:
         98:d7:cd:3f:31:80:e0:25:d8:dc:21:70:cc:45:6a:0a:d0:46:
         9b:7d:91:86:dc:d8:ab:0c:42:ac:df:be:f7:32:55:f7:3d:80:
         35:f7:20:e8:f8:02:8b:87:a5:86:b5:49:ea:b4:01:63:4d:5b:
         14:f0:ef:f6:04:10:6a:4d:fb:b3:01:b5:d3:e9:3d:6e:eb:5b:
         b2:77:1c:3f:f6:e6:b5:10:b0:8d:1d:c6:0b:cc:48:82:58:02:
         43:b7:0f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:04 2026 by rpki-client