Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41efc56a-c8f4-36a9-9351-05eab1c2d060.roa
File:                     41efc56a-c8f4-36a9-9351-05eab1c2d060.roa (raw, json)
Hash identifier:          ljkX+GWtxqvCxw0egQfGMNVA61/5hMpRQbUsr3lX7dQ=
Subject key identifier:   E1:E9:A0:96:56:99:1D:14:62:91:37:F2:A3:D0:A3:8F:95:A5:E9:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE0C21C3B7A3C7214EF49CBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41efc56a-c8f4-36a9-9351-05eab1c2d060.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     397212
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1c:3b:7a:3c:72:14:ef:49:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=df52630e-5039-42d9-a84c-e9ac04643251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:8d:44:b9:90:3b:5c:a6:ef:43:81:a8:43:
                    2d:5b:5e:c7:0c:0f:80:5b:61:d9:4e:96:5c:9f:ca:
                    49:4a:a3:a1:4d:df:6b:b6:f2:47:8c:10:c7:4c:4a:
                    08:2a:40:47:86:a0:04:80:b3:53:fc:f5:ba:f7:c8:
                    36:15:74:65:bd:cc:ed:c9:c1:fd:1a:13:e4:4d:5a:
                    9a:35:43:9d:7b:3c:e0:6f:1e:4f:d5:17:28:98:38:
                    49:be:7a:11:fb:a9:ac:a7:5d:c4:61:f0:3e:a1:98:
                    a2:39:bb:64:21:e4:b1:e2:71:62:95:8b:05:f3:50:
                    79:50:8d:70:d2:d4:1a:b3:fa:68:a9:c8:e5:9e:e7:
                    c4:18:c4:7d:6a:ee:85:2b:cc:98:3f:81:2b:d9:13:
                    ce:3b:d5:8d:59:e9:67:d8:f1:d9:36:f1:79:81:8a:
                    16:cc:d8:d1:ce:c6:f8:2f:7d:4e:7e:f4:6e:76:bb:
                    25:7d:b9:c0:19:bf:e1:40:41:01:9a:6f:b0:c1:58:
                    f3:26:6e:38:97:e2:fe:f2:5a:cf:0e:f4:42:9d:1b:
                    5a:d5:ea:19:be:f0:9b:6b:0e:53:ce:8e:79:f4:d4:
                    a0:4e:1f:da:76:68:9f:51:ae:c2:7e:7a:68:fa:5b:
                    05:fc:6a:6f:74:31:a4:da:81:e5:74:f1:73:21:d8:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E9:A0:96:56:99:1D:14:62:91:37:F2:A3:D0:A3:8F:95:A5:E9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41efc56a-c8f4-36a9-9351-05eab1c2d060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:fd:3f:fb:94:24:73:99:a5:f4:7a:d6:b3:3d:b5:98:a3:
         96:1e:a5:9c:3c:55:9d:1f:fb:d2:ad:61:f7:c1:45:ae:10:bc:
         e3:a2:d0:1b:9a:36:a8:9f:4f:d5:da:00:8d:38:4a:96:7e:77:
         9b:f1:d5:6d:88:f4:fc:41:60:52:5a:93:68:94:5f:2d:80:d6:
         b9:d3:cc:6b:6a:3a:ae:29:55:36:4f:a1:2e:20:75:dd:35:86:
         f6:7f:19:94:78:fa:26:6e:0b:4d:78:bb:7c:6c:71:f1:cc:3f:
         95:30:a1:73:ae:7f:c5:41:40:8c:9a:cc:02:9d:32:43:f8:8b:
         e5:41:aa:c9:d8:f9:4d:27:24:b1:34:07:4e:29:8a:36:59:af:
         aa:6f:e3:77:72:45:6c:a0:49:31:d2:02:1b:98:d1:44:51:84:
         96:9f:90:f1:74:cb:2a:e7:90:eb:a6:2f:86:81:4f:03:a7:8f:
         13:3b:f0:8d:7a:c7:21:8b:3f:07:19:c6:01:2c:80:c3:ad:03:
         43:c0:5f:15:53:e6:41:8c:8e:ae:4e:04:80:18:22:ac:00:35:
         5a:53:94:f1:40:0e:1d:e3:fa:71:99:eb:10:bd:94:9f:c2:d1:
         d6:d4:65:bd:9b:5a:59:9e:07:36:8d:0e:ef:cb:ce:7a:74:b1:
         0f:a2:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:02 2026 by rpki-client