Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f6fc9bc-b172-37f2-a075-39ab1c6ddb88.roa
File:                     3f6fc9bc-b172-37f2-a075-39ab1c6ddb88.roa (raw, json)
Hash identifier:          xvpuFf/wAlre9HSS71UK0C23WFAXOYd20bd7OyT2UNs=
Subject key identifier:   B8:DA:EB:5E:C0:69:95:D4:43:0D:55:8E:20:62:BC:44:83:E1:DB:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A7088976DCE18CCFA0BC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f6fc9bc-b172-37f2-a075-39ab1c6ddb88.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     397205
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:08:89:76:dc:e1:8c:cf:a0:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=da406af9-8c59-4db3-92f5-9e1c58d96d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:a1:2b:68:2c:ae:71:eb:e0:a1:98:c9:77:
                    ad:b0:a1:de:62:f4:4a:61:cb:42:b7:14:f0:e0:a7:
                    ba:1e:2c:d5:ba:41:a5:ac:4a:52:b1:b9:76:57:50:
                    3f:8f:0a:f3:db:08:e3:bc:4c:13:82:c5:de:a7:18:
                    b2:b7:d4:c5:26:ba:3d:ca:5a:d7:cd:52:3a:e2:0e:
                    85:e9:72:bd:cd:65:1f:7d:18:f4:af:a2:09:e1:85:
                    14:af:9b:3a:74:de:e2:e9:ec:57:a1:0c:78:1a:4e:
                    97:98:da:7e:0f:59:85:75:aa:9d:c5:c4:11:35:26:
                    ca:79:34:3f:05:d9:3b:a5:9e:08:9d:48:65:01:43:
                    48:e0:75:63:64:e3:7b:11:4a:fb:78:0e:8c:59:50:
                    a7:e1:ff:7b:94:41:f0:45:7f:4a:fa:83:c0:b9:9a:
                    07:5d:72:ec:55:7a:7f:6f:cc:20:25:f6:30:69:12:
                    56:0a:37:5e:82:83:68:81:bd:3f:d6:22:b0:4e:6a:
                    74:5b:a7:4e:59:90:79:21:ca:a1:07:b8:36:c2:39:
                    d2:bd:70:11:13:4e:2d:1a:29:b8:0b:0c:0f:44:f1:
                    02:bf:b4:52:aa:f9:6e:b3:1e:3f:b2:17:20:c1:d6:
                    eb:6d:9a:be:15:a5:98:c4:ab:6e:5e:62:56:b6:a1:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DA:EB:5E:C0:69:95:D4:43:0D:55:8E:20:62:BC:44:83:E1:DB:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f6fc9bc-b172-37f2-a075-39ab1c6ddb88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:93:3f:93:00:30:8d:cc:55:e6:38:6b:5b:1b:f8:c8:55:
         a1:10:28:88:4e:27:ce:af:9e:40:28:86:2e:c4:bf:ed:29:42:
         c9:49:8c:6f:4a:07:dd:59:25:56:b4:94:6a:f5:b5:f8:85:0f:
         ff:fc:d3:3e:93:f2:c2:6f:f2:86:54:bd:9c:21:f7:d8:2d:a8:
         5b:86:1c:d2:f3:5c:74:44:5a:76:b9:02:c5:bc:91:eb:ac:a8:
         6e:13:e8:f4:97:06:0c:d0:35:d2:11:fd:f4:1c:c1:cd:d3:7c:
         54:3b:4b:b5:8c:79:b5:bb:1c:33:72:10:8d:db:d5:f2:06:99:
         39:e1:46:ef:ca:0a:28:53:40:0a:67:af:c8:cd:c7:a5:59:94:
         1c:56:ed:a4:7c:a1:d4:7f:27:4c:bd:59:cc:d3:2e:39:f2:26:
         df:01:18:49:06:6a:68:3a:b8:c7:81:b0:99:d4:43:07:3c:f3:
         4c:f0:09:b8:26:9d:c2:46:9f:f2:ba:41:8f:39:e9:78:e9:21:
         9a:27:05:a6:31:71:bb:1c:a1:c4:c4:8d:56:c9:85:7c:c3:00:
         57:06:67:98:c4:1a:33:7f:a5:e2:39:31:f6:99:a2:24:7a:3f:
         d8:b6:43:c6:a4:37:2d:de:ea:74:df:8d:ce:12:bd:f3:60:85:
         77:25:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:47 2026 by rpki-client