Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e6396ab-9adb-373f-9029-a0c4812dddcb.roa
File:                     2e6396ab-9adb-373f-9029-a0c4812dddcb.roa (raw, json)
Hash identifier:          jCarnHIM9iqjnrh8plBsNdpKtd35kzIQExacvkEUM24=
Subject key identifier:   94:9F:8E:BC:9C:C3:AE:B8:FD:48:F2:B8:96:F1:F7:30:2B:AE:4A:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A71943897486374CAD3580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e6396ab-9adb-373f-9029-a0c4812dddcb.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396567
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:19:43:89:74:86:37:4c:ad:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=48898579-7be7-4244-a385-817aa36cefc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:ac:f2:61:ef:85:54:16:86:1d:0a:8c:f7:
                    e9:16:8f:09:1b:de:12:1e:42:fe:87:0d:61:c7:92:
                    9e:61:49:de:90:92:cc:18:04:f9:58:dc:e7:ed:73:
                    96:d2:a4:b0:87:cd:de:eb:dc:38:ff:a9:32:e4:ef:
                    58:e9:77:fc:bc:65:88:81:6b:b6:72:d1:9d:45:fc:
                    7a:ed:70:f8:4e:0b:d3:c0:28:98:df:d7:d6:24:2f:
                    32:9e:d0:61:a4:1d:a1:de:46:0f:19:30:6c:3d:3a:
                    51:98:37:c1:9f:ec:41:e9:fc:11:de:2c:26:7a:c7:
                    6d:7c:df:f6:55:48:2f:64:78:f8:27:c9:02:5a:22:
                    a2:d4:7f:69:59:ab:aa:4c:2d:88:d4:55:01:f1:09:
                    0e:13:85:05:77:76:c5:31:53:74:00:f5:f5:b7:3f:
                    e9:35:d9:fd:4a:70:42:bc:9e:1d:4c:02:c6:a0:f1:
                    78:8e:59:ec:c3:52:11:6d:f2:6f:6d:1d:8d:a9:ea:
                    83:d0:21:0d:ec:71:58:12:b5:86:fb:a7:45:59:09:
                    18:7a:34:1e:fe:e9:3a:ce:fa:21:1f:dd:78:b7:e6:
                    fa:e0:73:b5:47:96:12:5f:70:50:3b:c3:d9:29:c3:
                    49:79:45:74:1c:21:94:e7:fd:0a:f4:89:a3:4b:d0:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9F:8E:BC:9C:C3:AE:B8:FD:48:F2:B8:96:F1:F7:30:2B:AE:4A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e6396ab-9adb-373f-9029-a0c4812dddcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:5c:27:73:a4:c9:f5:b2:e1:4a:2b:f5:1d:4a:48:e4:ca:
         ed:b9:73:7e:23:05:9f:13:31:9d:5f:4c:c8:50:ca:ee:b3:39:
         86:cd:8c:15:0f:c5:57:a3:7a:2c:86:99:13:a4:32:56:54:a7:
         da:ab:a2:61:fb:02:a1:01:1c:37:90:c2:81:c9:59:f4:06:32:
         3c:c9:0b:9b:ca:f7:9c:45:2f:f6:ad:0f:e0:8f:0e:a6:be:c3:
         fe:bd:b8:3d:3e:9c:98:e9:19:2f:ba:e6:6b:41:60:f7:6f:f4:
         5a:cb:62:73:3d:2f:d3:47:61:41:8e:5e:36:f1:5e:ac:e6:27:
         53:82:2e:59:16:f5:ef:a4:fa:97:2e:ca:fe:7e:8a:ce:ae:14:
         0f:e3:35:33:c1:53:0e:17:57:53:91:ea:de:4b:78:4f:8a:0e:
         64:c4:23:35:cd:20:1c:8f:ad:75:5f:7b:84:02:13:52:d0:d6:
         5d:81:6c:2d:fb:5c:73:b5:0c:a6:4a:0b:f3:d4:00:74:23:ba:
         9a:f0:5d:7d:0c:e2:44:d6:6a:40:19:b2:a0:8c:57:bb:9e:8e:
         aa:31:20:7c:e9:64:e7:5d:1f:0b:32:79:57:4e:4a:e7:0a:8a:
         92:48:af:1a:ef:02:1a:49:ad:27:49:e7:e7:d4:d3:4c:8a:13:
         58:1b:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:00 2026 by rpki-client