Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5eb47c15-ba32-3087-881f-efd4195dd9ed.roa
File:                     5eb47c15-ba32-3087-881f-efd4195dd9ed.roa (raw, json)
Hash identifier:          ZHrsr3PhSFPXaPSIARqP1YVUMEMACV8aLOaqltih3KE=
Subject key identifier:   87:71:75:DC:AA:88:6B:22:B5:0C:B5:B8:8E:C7:57:B3:C0:8D:DC:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EDC924BE6A770AAA28BCD0D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5eb47c15-ba32-3087-881f-efd4195dd9ed.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     396545
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:4b:e6:a7:70:aa:a2:8b:cd:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=817d9855-35c8-4315-a1a1-37c95a44a930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:1d:18:35:4d:2f:3a:78:78:cf:e3:7b:f1:
                    98:ad:2d:d8:f9:45:e6:d6:19:d7:05:1f:ed:ed:77:
                    f3:a3:a0:48:79:69:2d:2a:56:a3:9a:35:a6:31:9a:
                    bd:ba:02:99:9b:36:b9:98:5f:91:51:45:23:d2:bc:
                    bc:bb:04:16:7c:38:be:8e:72:d5:62:56:f4:30:97:
                    95:59:a4:1e:93:54:9d:6f:17:bb:c9:0d:9a:59:b4:
                    1f:d9:23:3c:f3:ae:05:50:e0:83:ff:7a:7e:c1:ec:
                    a0:07:65:a9:97:56:53:2c:85:30:e0:11:aa:63:fc:
                    4f:11:bc:16:35:2b:2b:d5:68:6e:27:8d:74:a6:e7:
                    c8:6c:15:32:3e:24:5c:d3:3c:4a:38:d4:5c:8c:dc:
                    ba:a4:47:ab:f9:74:a7:ce:5c:7a:6c:36:44:1c:4b:
                    95:6b:28:2e:f3:c6:95:94:7f:d0:e0:6d:f2:19:f9:
                    c2:c6:9e:e1:a5:49:60:eb:cb:dc:a5:6b:fc:74:06:
                    8a:10:c5:41:65:67:17:46:cb:5c:92:d3:37:ea:6a:
                    3c:02:11:0c:f4:f6:fc:cb:7f:a3:b8:ed:78:b5:92:
                    04:a6:08:53:9a:8f:19:20:0e:30:51:99:db:ca:26:
                    1a:8b:22:63:d7:b6:3d:a0:2c:ce:dd:0f:6b:f8:9f:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:71:75:DC:AA:88:6B:22:B5:0C:B5:B8:8E:C7:57:B3:C0:8D:DC:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5eb47c15-ba32-3087-881f-efd4195dd9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a0:2a:d4:21:aa:ac:75:77:a2:2c:be:8c:cc:e6:64:9b:9d:
         24:57:9c:ca:ec:5a:7c:bd:4d:91:5f:72:a5:d9:07:06:f1:5e:
         f5:14:e6:82:f5:6c:2e:6e:4e:e7:5a:19:72:30:77:be:95:90:
         ee:e0:6f:41:e0:4b:11:7a:24:aa:d8:70:3a:05:6a:3a:a8:7c:
         07:ff:6e:33:b3:6a:17:33:3b:fe:ac:e1:18:46:ab:94:99:aa:
         c0:d3:ee:8e:3e:4a:9b:59:ed:8e:e3:9f:34:82:66:76:7f:92:
         3f:83:49:e2:88:7d:af:37:38:2c:69:71:b8:34:ca:2b:54:f6:
         76:4d:c4:e8:3f:df:de:4f:30:83:62:d8:b4:f5:51:05:f8:e3:
         d7:ef:e8:06:45:62:68:58:6e:b1:f1:76:78:aa:6d:3f:3c:a9:
         f9:22:c0:c0:bf:5a:eb:3d:f1:17:9f:5b:83:67:52:a5:68:8b:
         a2:f4:50:88:db:ca:7b:c4:6f:ca:a1:25:60:7b:f2:ff:8f:71:
         9b:2c:b7:32:77:b1:2f:65:72:2b:c1:45:cc:67:d1:89:da:05:
         0a:8f:b6:a5:dc:29:b4:83:99:01:cb:fd:aa:e2:6a:11:32:6b:
         59:63:83:ab:ae:0b:01:73:22:0d:c0:01:3a:ef:ed:88:49:34:
         38:f8:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:44 2026 by rpki-client