Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86fcbf3-de58-3bfa-8d9b-a22d391f10a6.roa
File:                     a86fcbf3-de58-3bfa-8d9b-a22d391f10a6.roa (raw, json)
Hash identifier:          oP+OjTHA+6Lje0bduvn3GkAExcg6E1P5shHph/NnVNE=
Subject key identifier:   73:2B:8A:7F:1A:50:19:5C:30:4D:D2:60:C5:83:EB:B6:BB:97:4A:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EDC91F586E31A96CCE18AF640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86fcbf3-de58-3bfa-8d9b-a22d391f10a6.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     396599
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:f5:86:e3:1a:96:cc:e1:8a:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=826c1269-3e6a-4ec3-b9cc-d14c0c0fd650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:ef:62:92:ce:04:27:d7:20:9b:96:ba:4f:
                    bf:3b:09:67:71:77:d8:c9:10:12:cb:f4:33:41:e4:
                    cf:2b:d7:13:3c:cd:10:6d:eb:28:50:a3:4d:ba:9f:
                    fd:01:a3:e3:97:f8:6f:6b:2e:48:46:9a:63:4a:f6:
                    4a:1b:9f:4e:d9:dd:30:9a:52:c6:f2:cc:6a:07:a6:
                    1b:c4:3b:f9:ac:4a:05:72:bf:f0:39:4b:8a:92:ab:
                    64:16:3b:c3:91:69:b2:02:d7:10:19:89:9b:07:af:
                    0a:30:d0:10:c1:35:40:d8:98:69:2d:ee:d8:73:f4:
                    e1:84:8f:9b:7d:7e:31:88:fa:7c:e0:a1:00:6a:e8:
                    dd:29:f8:1c:cf:20:fa:31:1d:04:69:db:e3:c5:89:
                    8d:08:8e:52:8a:1b:6f:d9:cf:ce:dc:a7:fa:85:51:
                    f6:e8:0f:34:c8:5f:2e:5b:41:ad:eb:df:4e:f4:52:
                    8d:98:36:2b:55:00:77:b5:ff:49:db:df:e2:12:f0:
                    80:20:3e:37:79:72:0c:2b:71:af:8d:b2:1f:bc:3e:
                    5f:01:88:b0:e2:30:dd:11:a4:66:6a:2d:04:1b:06:
                    94:cf:72:a4:7a:8a:37:9c:6f:50:96:f8:e2:77:78:
                    db:26:d0:52:16:84:c9:9a:99:1f:07:2d:d7:9a:da:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2B:8A:7F:1A:50:19:5C:30:4D:D2:60:C5:83:EB:B6:BB:97:4A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86fcbf3-de58-3bfa-8d9b-a22d391f10a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:1e:dc:cc:65:b2:22:2b:26:a8:d1:cd:18:34:5a:2d:43:5b:
         8f:df:d4:e8:f2:5e:f6:01:6c:35:d3:55:4e:00:56:80:4f:88:
         4a:32:d0:31:cd:72:25:90:e1:74:9d:6e:ee:e0:03:0a:72:b2:
         c3:f0:46:d3:9d:92:cb:73:3c:b2:3e:5b:fe:ae:1d:02:c1:55:
         9d:33:99:9d:17:b3:8c:f1:99:37:bb:05:64:07:03:ad:f0:ed:
         21:d2:7c:91:db:75:d7:8c:04:dd:5a:a2:3a:15:4c:a3:d8:21:
         02:b9:ea:1f:d1:73:71:ca:88:f2:c9:fe:b4:fb:ee:ff:b1:08:
         66:2f:ac:39:41:f0:5f:2d:99:78:36:60:4b:d3:10:53:05:09:
         8d:9e:ce:95:b6:07:dd:67:4f:5f:af:fb:68:b9:dd:5a:5e:af:
         f0:30:94:77:96:12:a9:58:89:53:9a:84:ef:cd:3e:a8:15:70:
         bc:78:e1:8b:3d:47:42:64:5a:16:47:eb:98:b6:8c:8a:c1:90:
         95:c2:8c:73:62:20:7a:bc:29:10:d8:31:48:74:5c:0b:96:ef:
         08:25:09:d1:53:09:67:42:7b:3e:20:2b:c5:9e:92:ca:8b:cc:
         78:3d:59:f9:72:04:05:a7:dd:09:0b:7b:56:e0:60:05:24:55:
         7e:35:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:31:20 2026 by rpki-client