Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a8e17ba-0699-33a3-a4f7-69d7d437ed7b.roa
File:                     9a8e17ba-0699-33a3-a4f7-69d7d437ed7b.roa (raw, json)
Hash identifier:          gM1wS9SXc0eKPkriYiFX/aHfSGfS1qVPSiHxgJP4MSc=
Subject key identifier:   68:CB:4F:F2:C1:63:E6:EA:50:8C:2A:3C:DB:3B:0F:C8:F0:C2:B7:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F629312C5C3DE6FFFB9F3D300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a8e17ba-0699-33a3-a4f7-69d7d437ed7b.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396595
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:12:c5:c3:de:6f:ff:b9:f3:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=2606fed7-6213-4665-bba4-6276df2cc0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:63:fa:4f:00:3e:21:f6:7f:e1:6a:9c:e6:
                    26:9b:bd:2e:97:b2:61:89:b8:c6:ea:82:96:93:2c:
                    8e:25:2c:b4:36:89:d5:e9:c0:25:d7:90:24:b9:61:
                    b8:12:75:79:4c:e5:9c:26:7d:4c:01:58:0e:21:41:
                    ba:8a:5a:8a:b1:e7:c0:d5:f9:8e:a4:d0:d2:cb:d0:
                    42:19:31:b0:8b:4f:74:28:c1:41:50:2e:f0:29:f6:
                    27:bb:d2:f6:67:aa:f5:6e:c2:a9:5b:b8:78:c3:79:
                    37:0d:91:f8:8a:a6:fa:af:17:b6:5a:f4:59:e0:5b:
                    fc:31:7c:d2:8a:ed:33:2f:98:01:fb:c7:42:55:ef:
                    e5:fc:22:96:65:a9:ad:20:2c:f1:b7:5d:50:d8:54:
                    3c:8d:a3:ed:86:82:f5:3a:81:78:62:a8:ab:30:81:
                    2b:2a:b6:19:4b:5a:89:19:61:f9:f7:6a:0d:62:52:
                    c8:ed:80:79:e4:ff:c9:d9:1b:0a:59:aa:d1:68:84:
                    11:d8:ca:a1:cc:76:fb:64:5c:40:eb:ae:c3:4e:16:
                    d7:ab:6c:7c:09:b3:e8:28:cf:e7:c3:86:90:f8:36:
                    fe:65:e1:58:f0:09:83:1c:25:b2:0d:4b:e0:d5:21:
                    5f:fe:64:66:f4:1a:54:c6:08:bd:4e:f1:35:73:b6:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CB:4F:F2:C1:63:E6:EA:50:8C:2A:3C:DB:3B:0F:C8:F0:C2:B7:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a8e17ba-0699-33a3-a4f7-69d7d437ed7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:d2:fb:89:d1:a4:a1:56:9c:d7:a4:a3:d0:74:f5:b0:99:
         c8:12:12:7f:96:b9:ba:20:e7:a0:68:16:5d:23:25:4d:c7:e0:
         d3:a5:35:d5:e4:52:fb:6f:3b:25:ba:c2:59:28:4d:3f:ee:0a:
         13:b5:99:f9:79:ad:d9:62:ad:59:7e:94:ee:68:af:c6:a6:b6:
         c9:13:4e:b9:5f:71:95:b1:db:df:21:a7:b7:77:55:f4:be:ac:
         ae:0f:4b:11:8c:d5:f4:cc:0e:e1:52:f7:2a:81:a0:09:a8:f5:
         21:dc:6f:e4:49:02:74:11:7f:97:f4:69:39:b7:39:8a:8d:66:
         54:b0:c3:0d:3e:20:41:e2:03:fd:36:84:73:96:cb:ec:2e:24:
         c2:3c:3e:53:84:e3:ef:1d:d0:e1:2d:ea:85:ec:9c:63:3f:9f:
         b1:62:cd:fc:4a:81:0b:99:d0:75:44:34:b8:e5:ff:d2:e3:ce:
         00:0a:01:0b:7a:99:46:87:ef:b4:75:f9:4e:1b:41:ac:ca:12:
         6d:97:c4:ec:93:40:09:b5:d4:07:6d:b1:08:68:51:58:32:b0:
         c7:88:c2:c6:8c:05:28:b9:47:5a:4f:2f:96:9d:05:57:3c:f4:
         43:8b:f6:97:1e:bc:cc:79:50:27:cb:9a:e9:a0:b8:6d:3e:52:
         42:67:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:54:38 2026 by rpki-client