Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7f56d0a-2dce-33fb-aabe-35074fc29725.roa
File:                     c7f56d0a-2dce-33fb-aabe-35074fc29725.roa (raw, json)
Hash identifier:          pQYBnzp4uE2tq4PZUkRvOXhAK3ca3a3V9a5MY+1aqlE=
Subject key identifier:   5E:74:DA:60:04:AD:AA:C9:73:DF:EF:35:8F:4E:DD:1B:48:AD:AC:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972D21EF0C4C5689C88C340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7f56d0a-2dce-33fb-aabe-35074fc29725.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36627
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d2:1e:f0:c4:c5:68:9c:88:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f892f2c8-3f10-41df-b680-51fea92a0fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:4c:40:3b:ea:d5:39:cb:0b:d1:3a:ca:a6:
                    17:de:09:29:fc:2f:00:52:88:6f:4d:0f:6d:35:07:
                    ed:6e:70:da:e8:5a:5c:a4:54:c4:5d:5a:42:cc:99:
                    24:02:82:13:30:65:3b:ca:15:4e:8d:2e:d4:86:b5:
                    b5:e9:bd:79:e5:71:8b:34:11:69:e2:28:5d:a4:c9:
                    82:95:86:b9:19:47:4e:a5:9e:d7:64:62:ac:8c:50:
                    d2:30:ed:b4:41:3e:23:69:df:ef:3b:40:68:3c:88:
                    1a:14:f8:50:05:bb:da:34:99:58:93:fa:6b:07:b1:
                    e1:91:86:4b:7b:88:f7:9e:13:a3:d6:19:57:b6:e9:
                    59:83:5d:82:91:72:c4:15:55:20:cc:bc:7e:ab:70:
                    60:18:0d:5a:04:36:7c:90:f2:dc:d4:ab:60:1e:e1:
                    13:ef:36:59:45:c0:0c:cc:40:c6:8e:af:47:6d:88:
                    f6:95:d7:32:ca:67:40:8a:7f:91:48:88:b4:fc:3e:
                    a1:5a:ce:84:41:9a:c3:01:39:0b:f4:b7:e6:c2:80:
                    14:10:71:18:d5:f2:e6:c0:df:b7:5d:7e:71:28:23:
                    74:88:bd:5a:d9:88:5d:db:14:3e:93:21:70:aa:46:
                    94:61:1a:a5:6d:c9:ed:32:bb:6a:59:58:90:7b:1e:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:DA:60:04:AD:AA:C9:73:DF:EF:35:8F:4E:DD:1B:48:AD:AC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7f56d0a-2dce-33fb-aabe-35074fc29725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:43:08:6a:28:b1:f7:81:c6:f0:53:05:cb:d5:9d:f5:d7:
         3d:c1:0b:70:53:86:77:2b:8f:4e:2a:c3:2e:50:c8:c7:22:6d:
         82:96:77:bf:24:4e:be:90:26:cc:e8:e2:a6:5d:3b:43:1d:a7:
         48:ba:62:56:ac:93:b3:0c:99:75:9a:3d:fa:e1:4b:87:05:91:
         64:49:99:f5:a8:f6:5b:1a:19:67:f7:69:bd:b3:9c:f0:3e:3f:
         5e:a4:ff:93:58:07:a9:50:67:64:57:af:0a:0c:fd:b6:4a:7d:
         bf:6e:38:5f:03:50:fd:c3:8e:27:5d:5b:6c:a3:69:42:2a:8d:
         6a:4b:26:37:01:7c:8b:6d:a1:55:63:36:40:84:2f:41:ce:37:
         98:32:ea:f6:fc:0c:5f:6d:c0:36:60:26:a7:b3:af:99:6d:ca:
         e0:a4:ed:e6:ff:de:de:15:a6:b9:f8:cd:e3:95:8b:4d:33:0f:
         23:ee:48:f5:78:1c:af:26:e4:61:88:30:7c:09:eb:0b:09:37:
         d9:dc:35:c9:93:a7:1e:48:1e:81:12:8b:6a:39:25:32:d6:f6:
         c7:bd:75:4d:9d:16:fb:98:18:3e:dd:b9:cc:24:b9:4a:28:f6:
         70:82:a8:de:bc:ec:77:7d:03:c6:3b:34:e0:cd:b0:b7:1d:78:
         4e:67:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:03:55 2026 by rpki-client