Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86bf9eaf-a6ec-3650-9167-5e04a6ad5f8c.roa
File:                     86bf9eaf-a6ec-3650-9167-5e04a6ad5f8c.roa (raw, json)
Hash identifier:          Mc75q45TvXlcgTc42ovJlpgPucVjGIA5pB3FFLH3+Ak=
Subject key identifier:   C4:20:05:E4:96:9A:93:DE:D0:EA:DA:8F:E2:27:85:65:99:DB:64:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A7055A255BFC31B021B400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86bf9eaf-a6ec-3650-9167-5e04a6ad5f8c.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     397201
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:05:5a:25:5b:fc:31:b0:21:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=73ad4ad7-bf5f-4ca1-ade3-e2e1f24191b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:64:cd:3f:75:f2:9c:93:01:78:55:00:33:
                    c6:d3:b1:31:56:5c:ac:69:0c:c7:2d:1b:97:b7:16:
                    8a:4b:c2:a4:4d:fd:de:9c:c3:54:73:a1:2a:c2:41:
                    a1:b0:fb:91:51:e5:82:8f:85:93:59:0c:8a:34:e3:
                    d0:76:74:7c:4d:d7:4d:29:a1:fe:46:74:7d:2e:46:
                    2f:07:61:1d:f0:02:e4:05:14:7c:8f:86:09:56:bb:
                    ab:ba:48:dc:09:92:b2:63:5a:22:3f:e1:ad:86:99:
                    66:5e:95:89:48:52:b8:e8:84:56:b5:53:62:e6:19:
                    57:e1:23:cf:ed:f2:e3:af:02:89:27:00:27:e4:b0:
                    88:e8:bb:e7:be:6a:bc:6d:19:6a:08:a7:a8:2d:f8:
                    89:17:45:17:59:85:2c:65:19:15:e1:ef:06:57:14:
                    27:c5:c5:64:38:a1:cf:f1:11:a0:a4:b5:7c:85:93:
                    41:e0:c2:44:0a:7d:19:47:f6:53:68:31:92:5b:ab:
                    00:90:0c:43:5d:5c:8a:a3:d0:d5:be:bb:77:44:1f:
                    b7:07:4f:3e:3e:8a:d1:2d:4e:4b:4c:eb:a4:f1:4c:
                    8a:7d:ca:3a:10:b9:20:20:19:d1:58:02:6b:51:fb:
                    15:77:ad:41:f6:65:4b:d3:2d:51:86:fa:f6:07:3e:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:05:E4:96:9A:93:DE:D0:EA:DA:8F:E2:27:85:65:99:DB:64:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86bf9eaf-a6ec-3650-9167-5e04a6ad5f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:de:2a:11:a2:57:a3:1a:e8:75:60:cf:a2:af:45:e3:1a:95:
         02:14:70:c1:f7:0c:29:3a:f9:07:52:d1:0a:88:32:f6:47:4d:
         cc:dc:f5:cc:12:8a:61:a1:fd:ce:15:12:7a:be:62:8d:89:ca:
         c6:7f:59:23:69:a2:68:a2:f1:b6:e1:d4:41:82:95:46:b7:5c:
         6a:da:65:90:e1:28:ac:72:e4:d0:d1:42:ef:05:61:a7:85:17:
         68:9c:60:21:b9:80:e6:ae:9d:eb:4e:0e:86:6d:32:d1:44:ae:
         52:93:a9:1a:fd:0d:40:3b:da:aa:e3:0a:ff:1c:ae:95:00:be:
         bf:5b:7e:d4:5c:89:b4:a8:00:b1:f7:19:80:4c:78:6e:cc:7a:
         51:83:8e:a9:90:54:ae:6b:fc:92:40:f4:b8:cb:3d:0e:99:0a:
         80:cd:55:6f:ef:45:64:7d:01:e6:87:37:ce:a1:42:49:a7:fc:
         2f:cf:95:52:b0:ab:0b:ca:ea:64:7e:c0:0a:f7:4b:11:42:a4:
         15:23:1c:4b:68:79:f7:8d:f7:27:db:dc:0c:f3:bb:63:0b:23:
         27:60:c2:44:da:a0:7f:10:96:36:da:04:42:57:df:56:48:17:
         98:9d:31:be:8c:b1:d0:da:4c:e3:ed:28:77:8c:e2:84:53:69:
         05:e2:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:27:20 2026 by rpki-client