Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6a4555-d9b6-3db2-a1dd-c8f7efb2f47f.roa
File:                     6f6a4555-d9b6-3db2-a1dd-c8f7efb2f47f.roa (raw, json)
Hash identifier:          iaasCyN1eQHVeGH/Q5LJSQOMOQNg8vZDxgrouyyo53o=
Subject key identifier:   47:BC:38:CB:37:91:87:C4:80:D2:57:4F:02:6E:52:24:5D:AA:13:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F62931827321968634ED84E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6a4555-d9b6-3db2-a1dd-c8f7efb2f47f.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     397205
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:18:27:32:19:68:63:4e:d8:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=03de3b50-1d25-4b51-ae26-d71bdc4cb5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:73:00:df:23:6b:e0:f1:74:43:50:55:3e:7d:
                    a7:f5:41:ce:2a:7e:e8:9c:29:81:ef:0e:88:b8:f2:
                    69:85:92:64:f0:14:f8:aa:ac:11:39:55:d1:c0:dc:
                    2d:55:d1:82:46:2c:99:29:80:de:cc:ba:3a:43:b9:
                    0c:c3:ec:c3:06:46:7d:c0:73:13:48:47:35:c9:a9:
                    7b:9b:88:36:55:de:fe:d4:75:fa:85:0a:2f:6d:05:
                    cb:e2:4b:d1:35:1e:3f:a9:b5:e8:77:9d:6a:8f:5a:
                    d9:81:57:46:eb:76:a4:58:34:1a:5b:93:02:7a:69:
                    e3:c6:d7:bb:54:5c:fa:71:6d:e3:2b:37:62:b9:b2:
                    b2:0a:08:aa:f6:94:f9:44:55:75:fa:3b:8d:3b:b6:
                    cc:e2:63:65:96:52:cb:09:ba:63:8d:95:35:7e:a2:
                    37:f8:b1:e0:75:c6:ff:d8:4d:28:15:a2:be:04:8e:
                    b4:3b:0a:1c:a5:bb:77:87:0b:89:5a:d0:80:b0:65:
                    02:6b:e0:72:dc:8d:73:8b:9f:2a:16:9f:9e:65:dd:
                    89:d7:2b:8b:2d:94:3b:91:c2:1f:8d:c8:0b:24:f1:
                    f3:8c:c2:33:a3:63:f6:a7:f0:3f:4c:c5:dd:c6:ea:
                    12:1d:d9:45:fb:55:d0:f7:0a:d7:29:87:3d:2e:0c:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BC:38:CB:37:91:87:C4:80:D2:57:4F:02:6E:52:24:5D:AA:13:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f6a4555-d9b6-3db2-a1dd-c8f7efb2f47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:08:c2:96:b9:22:58:c7:c8:dd:3f:a5:cd:f2:68:b1:da:df:
         82:65:7a:f9:63:42:c6:53:fc:ea:9f:ed:0e:ed:80:7a:3e:5f:
         fc:e5:4b:a3:20:fe:8a:21:a3:28:5d:cb:65:9b:9a:d7:ba:6c:
         48:17:cf:02:20:45:38:88:09:85:1d:31:64:59:ab:3d:d9:90:
         4a:8d:a8:33:fc:15:26:f0:31:d3:de:36:fd:c5:c8:5b:6f:30:
         35:9b:3e:a3:6e:49:ea:7c:54:1c:a7:22:4c:8b:32:ec:d8:17:
         37:25:d1:d9:3d:e6:1e:58:c9:ad:00:46:e6:09:0a:79:10:1c:
         5e:c1:1f:ed:22:6a:67:06:f2:63:0c:57:37:ce:7d:29:33:8c:
         c5:41:ed:44:98:87:0b:09:3c:fa:1c:d6:1e:fc:20:ea:10:1a:
         4b:81:aa:09:35:fc:ea:9d:06:f8:24:7e:11:f5:29:05:91:6d:
         bf:ca:93:dc:ce:1f:80:60:00:7b:6c:7e:2a:a8:16:d6:9e:c8:
         11:97:66:33:83:b8:c8:a8:fc:59:1e:b0:f6:14:5f:ab:e4:06:
         ed:52:d1:13:17:47:72:70:35:64:8a:4b:7c:85:31:ad:38:d3:
         e9:1d:99:47:f6:35:95:3f:69:75:a3:94:8f:86:02:89:ed:eb:
         91:ba:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:55:07 2026 by rpki-client