Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6498ee1-ee0b-3fb0-ab41-8392b1eb6254.roa
File:                     c6498ee1-ee0b-3fb0-ab41-8392b1eb6254.roa (raw, json)
Hash identifier:          TNGDNruH4baZHSvWHtMrWSFzjCqmgwUcRpB3ITHcSYA=
Subject key identifier:   DC:7A:12:A7:47:CB:F0:0E:53:F1:68:8F:FF:7E:5E:5F:44:F0:F9:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE0C1E6966C589525F7C63220
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6498ee1-ee0b-3fb0-ab41-8392b1eb6254.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     396555
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e6:96:6c:58:95:25:f7:c6:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=05ee7b7e-6d46-4f0c-bf8e-2817177c99b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:29:4e:bf:12:f5:db:f7:ae:1a:2d:d4:f7:
                    58:77:3c:92:95:25:6c:b6:71:23:b0:74:4d:1d:de:
                    45:b0:41:0f:0c:b4:3e:a2:7f:23:18:db:91:1f:60:
                    29:72:e7:c6:05:ce:1a:f0:2c:4c:e8:b4:54:94:b3:
                    9d:d8:72:83:59:ea:65:2e:8b:fa:39:2f:ec:2d:81:
                    72:78:f6:78:6d:f1:84:98:1b:37:5a:51:9c:e4:97:
                    be:40:80:26:57:9b:e6:b7:23:06:61:a5:38:9c:94:
                    87:17:a8:a1:e3:68:54:3c:78:f0:80:d5:0b:b6:f3:
                    28:db:9e:a9:e8:60:04:d4:1f:57:42:ef:2f:49:e0:
                    87:ce:29:04:3e:7e:d2:62:7c:be:44:86:0a:3c:8f:
                    ba:e1:b2:d8:5d:0e:f1:fa:81:3b:2b:be:90:c5:bf:
                    24:5d:6b:8a:d7:42:80:34:f8:0e:80:16:2a:ac:db:
                    e9:1e:54:b1:16:4f:e6:dd:ba:6b:22:95:28:43:72:
                    7f:53:e6:39:a1:0e:97:f6:c0:14:39:c8:d3:55:3c:
                    b0:67:3b:1d:99:f3:9a:e9:1d:10:85:d3:fe:db:ea:
                    36:eb:c7:67:36:5b:eb:fe:2b:17:44:30:d2:0b:bd:
                    58:90:d5:6c:1e:00:96:fb:2f:6e:5c:87:56:cf:bd:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7A:12:A7:47:CB:F0:0E:53:F1:68:8F:FF:7E:5E:5F:44:F0:F9:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6498ee1-ee0b-3fb0-ab41-8392b1eb6254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1d:95:66:81:62:fa:2a:93:de:46:77:2c:5c:83:3f:33:fa:
         47:93:05:91:54:30:43:b5:b0:81:d0:57:0d:b8:92:65:b3:7c:
         16:ac:c9:c7:47:d6:81:19:ac:e7:3d:9f:13:97:dc:32:5c:9d:
         1c:60:20:75:14:c3:9e:d1:2a:16:20:f6:0f:2a:67:74:41:71:
         a5:7c:54:76:80:ee:0a:9c:01:6c:98:88:ee:23:02:9b:5c:d0:
         7d:fe:2d:18:04:8e:ee:42:b4:f7:f1:b0:c1:da:9a:c5:44:6c:
         14:51:74:ef:e6:52:0e:41:68:ef:c3:e5:18:fa:e8:33:2b:ce:
         26:85:20:05:12:cb:e9:d6:90:41:77:b9:e4:fa:ba:b3:ce:5f:
         13:01:78:a4:ee:ff:64:89:06:4c:17:d1:b8:7b:20:2c:ae:85:
         68:c0:37:aa:2e:03:41:e3:61:51:b7:b9:7c:3b:1b:fc:11:50:
         64:de:ea:4a:99:ef:16:ea:32:b0:60:0e:8d:bd:d7:2a:a9:a5:
         ff:30:44:af:c4:e9:52:18:2c:d8:e2:20:d0:24:20:9c:72:88:
         34:d3:c1:58:55:39:51:3a:e9:39:03:87:d4:eb:cd:2b:c2:c1:
         a4:95:96:f6:fe:fa:95:b4:21:3d:87:99:4c:e2:36:07:fa:ce:
         e7:6a:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:31:05 2026 by rpki-client