Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c26e1d-9752-3cb0-824a-45cbda1ff608.roa
File:                     62c26e1d-9752-3cb0-824a-45cbda1ff608.roa (raw, json)
Hash identifier:          /XWPBY/BubCmy1MaTkFxhoekP5e8YoBZ2BFGul9sGJY=
Subject key identifier:   96:1A:B6:EA:42:AC:C4:4C:67:CD:59:F0:6E:F5:60:C4:7D:9C:D4:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA8EC52A9F813AD0C35F64080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c26e1d-9752-3cb0-824a-45cbda1ff608.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     396553
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:52:a9:f8:13:ad:0c:35:f6:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=c5a0e19b-156a-4eeb-b81f-db5a4727d8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:1f:22:05:0e:ec:ea:6d:73:7e:b5:27:95:
                    98:74:e2:61:cd:7d:da:50:b4:d8:8a:13:fd:db:62:
                    6b:13:ab:e5:7f:e0:bd:11:c0:26:ff:de:bf:08:0c:
                    f5:0f:f6:32:97:7d:26:44:23:ef:94:ae:a5:bf:4a:
                    98:e8:5c:e5:a0:d3:1e:cd:79:45:4d:e8:f7:48:ba:
                    28:d3:7f:51:56:1e:7c:46:9b:5d:3b:94:e1:38:49:
                    da:29:a1:2f:f6:5a:ec:d7:93:67:bd:49:8b:41:18:
                    68:44:a0:c6:3f:fa:79:88:8d:f2:e2:86:d2:9f:71:
                    29:7a:4d:0f:3d:70:23:56:b9:ed:66:15:82:72:2c:
                    dd:b5:a7:f7:75:74:bf:b1:5d:ad:23:c7:2a:99:b1:
                    46:7c:d7:17:f3:63:1d:2f:e8:16:1a:32:79:b7:52:
                    f4:ab:01:09:d1:f1:86:dd:85:3e:95:79:0d:a4:24:
                    51:2b:d6:12:73:ed:b0:6f:81:15:3e:4c:08:f0:3b:
                    3a:e4:7d:97:fe:0f:2e:f6:ef:39:11:93:d1:4c:ba:
                    e6:39:11:9a:ef:09:0b:df:23:3f:c2:d3:0e:79:9e:
                    98:4b:da:b9:01:8a:08:c2:86:ce:0f:f0:c2:1e:18:
                    c6:2c:e5:87:b7:f0:ed:4f:54:f3:ba:a2:e7:0f:02:
                    64:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1A:B6:EA:42:AC:C4:4C:67:CD:59:F0:6E:F5:60:C4:7D:9C:D4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c26e1d-9752-3cb0-824a-45cbda1ff608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:17:6f:5c:b4:7a:9c:4c:7f:4e:0d:f5:2e:1d:8f:34:75:ac:
         b5:73:26:48:94:59:e9:b7:c4:de:09:a3:fe:c9:a2:4d:6c:c1:
         fd:ca:1c:4e:b9:ee:73:11:2b:67:5a:ba:f1:c0:94:35:ac:9b:
         70:c8:18:f5:58:5d:57:db:c8:ee:81:26:c4:ea:f2:6f:2c:d6:
         ee:a5:76:21:65:15:99:be:2b:d3:a0:53:e4:ed:3e:40:df:81:
         ea:03:12:c3:17:33:a9:11:68:69:fa:f8:55:14:67:bc:11:cf:
         8f:63:8f:6d:79:ab:2e:13:2d:e1:98:c6:83:ec:f0:11:42:b6:
         db:00:83:84:5d:aa:9f:5b:9b:1c:b8:d8:f6:a4:14:28:d8:50:
         41:10:81:de:23:41:2d:29:b5:68:1d:fd:cc:77:b3:62:70:b5:
         2d:e2:d3:d3:1b:a7:5c:57:02:f8:dd:ac:d1:40:78:40:ff:54:
         97:f2:a2:12:0a:9c:41:0d:26:24:8d:84:9f:96:bc:a8:a7:56:
         7d:22:26:0a:a1:cf:00:b5:04:97:8d:5e:06:f0:69:5f:2a:2c:
         36:ac:a6:e0:8b:ec:0d:a5:04:5e:d4:87:e7:e5:63:37:28:42:
         96:2d:b0:67:1a:43:3c:cd:d6:14:dd:4e:d2:d4:12:87:e5:e7:
         78:04:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:22:35 2026 by rpki-client