Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa
File:                     b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa (raw, json)
Hash identifier:          QkeMLKduVkh/2yctZIzf6pUrh3aaxGsDWb+qUxW1KjQ=
Subject key identifier:   20:26:13:82:E4:71:7F:6E:EB:3B:14:A9:EB:AF:B4:AD:9D:7E:EF:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EDC9249FAF5F399E7AF613C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     36628
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:49:fa:f5:f3:99:e7:af:61:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=a72f5f9d-afed-4f69-9216-5b5e7d24e01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:ea:d2:c5:26:24:9d:03:21:59:27:4b:76:
                    e0:dd:a9:ea:eb:8e:eb:1b:0b:a4:21:99:9e:35:8a:
                    ba:ee:a3:cb:a9:ad:ee:7b:75:d9:d8:a5:1b:b2:2d:
                    05:e9:8a:a4:4c:43:2f:d0:12:2d:a1:c0:ea:2d:9e:
                    3e:27:5a:67:b5:a9:5f:76:17:f0:d8:a1:99:19:4b:
                    79:46:4c:77:65:9a:38:6b:1e:25:de:6b:09:b9:4d:
                    03:36:1f:be:13:e2:de:d7:a8:43:6f:37:88:23:70:
                    a3:c5:02:34:d8:21:d6:52:03:e5:fe:23:4c:17:d4:
                    ff:4e:be:d8:32:a6:ad:63:2e:6b:61:d5:29:d5:d0:
                    77:d3:ff:be:6b:cb:10:18:8b:b0:26:3d:fc:f3:e6:
                    2c:81:b8:da:f7:ba:96:ac:6a:99:a4:da:12:8c:72:
                    c6:0e:bd:9f:71:14:97:29:99:0a:44:5f:9c:d2:27:
                    7e:ac:7f:96:f2:94:f3:03:9d:f2:d0:50:72:84:d5:
                    36:a4:83:06:81:1c:7c:7f:bb:91:73:cc:89:2b:67:
                    fe:c6:f4:02:a6:78:f4:8e:ef:55:dd:4b:27:20:8b:
                    7b:36:42:51:2d:94:43:b1:6d:b1:89:f1:9b:77:eb:
                    7e:fd:40:7e:e2:0b:1a:5a:01:80:db:e1:f7:dd:2e:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:13:82:E4:71:7F:6E:EB:3B:14:A9:EB:AF:B4:AD:9D:7E:EF:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:bf:7e:4c:83:43:b8:50:b9:77:e6:2d:89:7d:3f:3e:f5:a5:
         f3:fa:26:de:46:4f:47:62:ea:56:a8:73:8c:40:92:e3:23:50:
         17:13:d4:76:28:e8:49:b7:9d:cc:da:4f:02:57:82:03:14:c5:
         8e:51:7e:81:58:e0:25:e3:40:99:4b:9d:83:46:76:30:39:96:
         95:fc:80:81:c1:87:76:17:5c:55:8b:27:3e:3a:38:14:ce:7c:
         d7:90:59:da:85:5c:cf:c0:77:b6:8e:32:30:3d:60:82:82:3b:
         d0:1f:cd:c0:12:fb:f9:41:0a:c7:ae:be:a9:2a:e3:ea:16:7c:
         de:c5:63:5f:6c:d8:60:ef:0b:8f:94:c8:a5:3b:51:f0:0e:0d:
         bd:dd:81:d6:8f:c8:52:91:7a:db:73:70:35:b0:eb:e4:15:e4:
         b1:bb:48:46:7a:93:49:50:28:26:5e:6f:c3:19:7c:ec:41:cf:
         e9:35:7f:5c:6b:b6:5d:8c:48:6b:3e:b9:d8:d5:ad:8b:0f:3d:
         b4:ad:80:90:54:b3:25:97:f5:a2:17:1e:24:2a:29:c3:6c:8c:
         25:b1:45:ce:45:a5:12:1b:14:80:37:45:1a:eb:35:8f:84:fb:
         16:10:ec:5f:57:83:a7:da:e0:fc:b7:86:00:31:03:f1:0e:2e:
         f8:d2:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:21:32 2026 by rpki-client