Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b406bbb-d0cb-384a-afb0-9c050c322b37.roa
File:                     2b406bbb-d0cb-384a-afb0-9c050c322b37.roa (raw, json)
Hash identifier:          YlJnS1Hln5hRgQV43q0U9GRchP9mLGYfwDNdD/d4/TQ=
Subject key identifier:   06:62:76:49:0F:5F:15:5D:84:50:67:FD:5F:AE:EC:69:34:19:C9:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62B5815AA461CF6C5B6D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b406bbb-d0cb-384a-afb0-9c050c322b37.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396606
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b5:81:5a:a4:61:cf:6c:5b:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=bbcf3882-0ab6-46ca-b6ec-95edc8079d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:23:b6:ae:62:3d:96:b6:18:40:af:98:c2:
                    48:50:76:8e:ef:01:46:e1:fd:f5:5a:a9:ec:17:57:
                    19:40:b1:50:ea:19:43:3a:74:72:7f:90:58:a8:96:
                    da:4b:88:84:75:1b:48:01:7c:bd:ff:51:0d:5c:81:
                    04:53:20:57:e8:24:aa:5f:d0:ee:31:ad:7c:42:bf:
                    3b:a1:3b:b6:03:dd:70:d1:9d:fe:f2:01:11:a7:97:
                    93:70:14:1a:1c:ce:42:f7:0b:60:83:63:a4:12:f1:
                    c3:d4:85:75:64:1e:a7:39:0d:17:39:34:e2:ee:b4:
                    9a:1b:fe:de:e2:0f:20:c3:7a:b9:4e:14:54:d4:66:
                    13:ce:78:10:4a:ba:57:e9:b7:21:17:34:41:f6:a2:
                    bf:94:41:cf:1e:94:22:c7:39:bf:e7:41:74:68:c5:
                    f0:04:ff:b7:23:58:68:3d:21:d3:40:67:68:36:4f:
                    0e:a5:16:1c:ae:1e:ad:c2:0f:8a:c8:e6:29:01:70:
                    d0:1e:c4:73:c3:a4:56:c6:6c:14:ff:3c:95:0b:c1:
                    90:a5:1b:b8:19:95:9b:d8:33:91:30:6a:53:d4:d2:
                    01:6b:24:14:07:89:c6:2b:02:8c:0e:e8:f6:53:dd:
                    31:60:c8:90:4c:e4:99:ae:26:5b:d2:d7:44:db:ed:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:62:76:49:0F:5F:15:5D:84:50:67:FD:5F:AE:EC:69:34:19:C9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b406bbb-d0cb-384a-afb0-9c050c322b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:83:8a:1e:2f:72:f6:2b:2d:af:30:08:5c:c1:34:9e:fa:d7:
         e2:4a:dd:67:3d:59:e0:c5:eb:9b:7e:4b:cb:f8:c3:21:39:27:
         c7:9d:db:86:c3:94:12:64:53:c8:05:ab:e4:a1:83:e7:b7:1e:
         c9:53:ef:79:6a:ee:0e:fc:8e:80:53:bb:05:04:b2:5c:36:e7:
         18:e0:7b:4a:31:bf:fb:8f:ea:18:ef:bc:ff:79:18:29:ff:e2:
         d8:68:1e:88:96:ca:3b:12:73:e0:02:0b:8f:3d:22:74:89:eb:
         25:4f:56:c4:0b:59:40:cf:53:f1:10:49:67:38:cf:dc:fe:35:
         ec:5d:8d:98:de:6d:1b:5a:b3:94:22:2a:df:48:70:85:46:72:
         18:a4:83:27:80:ca:f8:76:23:aa:e7:a3:22:36:cf:0e:0c:9a:
         7a:d1:4a:86:3c:69:0f:9e:ff:60:2c:f1:0c:87:7d:56:9b:ab:
         19:8b:09:ce:ef:74:0a:1e:ee:23:97:76:87:eb:df:1f:b8:f9:
         84:19:ca:7e:03:f3:5f:80:d5:47:3a:7e:ee:fc:3f:f3:b2:1b:
         0a:aa:b3:c7:8a:5a:d2:8f:59:cf:ce:4b:9f:c7:4a:17:d9:02:
         67:14:0e:98:ab:bf:d5:82:d4:c5:e4:4a:ab:f1:c5:87:79:8d:
         1b:c3:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:34:03 2026 by rpki-client