Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26134ba9-bf7b-3a6f-a8d9-7a67d0995d5f.roa
File:                     26134ba9-bf7b-3a6f-a8d9-7a67d0995d5f.roa (raw, json)
Hash identifier:          4wYjllKHYFyZFriEWMtQ5ZMmyq5w2ZynzEZijgle4Cs=
Subject key identifier:   D4:B3:EE:C7:89:10:0C:A0:7C:7F:9E:3B:A5:63:7E:6F:0B:2B:57:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B9CA22B43B056CC196202EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26134ba9-bf7b-3a6f-a8d9-7a67d0995d5f.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     211369
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:2b:43:b0:56:cc:19:62:02:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=3c1009b4-0e44-4706-86c6-945f9c8b0920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:ea:2f:ad:eb:1e:d0:b8:a2:33:03:db:d4:
                    fe:d8:60:ee:27:01:8c:fd:7a:86:b5:23:c0:e1:09:
                    13:15:f5:a5:ab:f6:e5:32:94:06:45:0b:9b:e9:a3:
                    e8:2d:95:01:50:f6:4d:6c:a8:d1:f7:06:06:c2:95:
                    66:d2:f3:70:19:2b:0e:60:36:cc:00:4f:82:14:dc:
                    c1:77:34:94:2f:ef:5d:f4:17:11:6a:01:51:a9:5a:
                    d3:d4:f0:23:83:01:1c:db:64:a6:67:3f:30:df:e8:
                    e4:80:6d:2f:42:6b:ed:fd:12:df:f9:2a:6c:77:66:
                    12:88:cb:bc:bc:cf:86:6e:65:9b:db:a2:06:0b:65:
                    9a:5c:c5:6a:95:96:7d:a5:1d:25:4c:f0:a0:95:8f:
                    7c:14:33:bb:3d:e0:a2:49:ed:75:72:30:8d:ee:58:
                    20:13:f5:ee:3c:36:d8:e2:de:62:d2:dc:ca:13:b5:
                    a9:e1:31:bd:7f:01:52:09:2a:a0:7d:f5:13:55:28:
                    31:a8:10:6f:de:16:01:30:1d:2f:a1:24:4f:03:52:
                    14:6f:3f:ad:ba:5e:8a:95:95:4a:e1:f6:f6:78:e6:
                    2a:d0:4b:c1:ea:58:4a:5a:46:11:e8:d5:14:20:2d:
                    b7:2a:8f:d1:ac:5b:46:0a:1f:97:bc:d1:e6:9c:12:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B3:EE:C7:89:10:0C:A0:7C:7F:9E:3B:A5:63:7E:6F:0B:2B:57:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26134ba9-bf7b-3a6f-a8d9-7a67d0995d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c3:76:08:6c:95:67:8e:fa:5d:b9:3f:39:78:60:b5:b6:54:
         25:cc:44:86:0e:d9:e1:e5:76:86:fa:6f:0b:8a:bc:0a:2c:f3:
         db:06:0a:ec:f6:18:70:3b:23:e7:a1:b4:ce:9e:5f:25:33:be:
         cf:60:ac:22:f2:ce:db:91:95:38:61:2a:80:a4:72:ef:a9:87:
         50:f5:a3:36:3a:7b:a8:80:50:f2:05:65:87:75:18:c9:af:08:
         fe:c5:d2:86:91:37:45:6c:7b:ab:84:c3:1d:2c:df:e9:7d:77:
         25:f1:8b:f8:5d:df:5a:3c:92:5a:f3:f1:9b:88:1c:90:25:91:
         d4:67:a1:2d:64:1e:84:a5:8a:76:71:8b:f7:3b:55:ac:95:53:
         40:a3:15:33:8f:8a:7c:13:5e:02:60:6d:ee:b5:4b:e0:23:4d:
         f2:b6:60:2b:5c:7f:90:32:a1:40:80:cc:ad:a8:b4:33:ba:e1:
         57:22:93:d3:c0:3c:28:64:81:04:0e:0a:c4:6e:4e:63:36:5c:
         b9:cf:36:2b:27:bc:2e:5c:f2:12:2d:4f:36:ce:49:51:fb:e8:
         f1:c3:f1:75:b3:65:48:91:49:de:a7:15:c0:4e:e2:d2:09:67:
         87:1d:de:0e:04:28:f5:ac:26:65:56:19:67:45:a6:45:82:c6:
         fd:14:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:12:41 2025 by rpki-client