Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84700b5-be90-3712-8a4c-b001e65ca1f2.roa
File:                     d84700b5-be90-3712-8a4c-b001e65ca1f2.roa (raw, json)
Hash identifier:          uR9yLmraFYm4OiTujgjqQMVTlNDt/3d7h1uQiOGmhFI=
Subject key identifier:   D8:F1:AD:11:62:A8:93:E1:B0:CA:5E:E5:DF:62:ED:95:75:17:03:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793B254E52DC1F0F0F03C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84700b5-be90-3712-8a4c-b001e65ca1f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396600
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:b2:54:e5:2d:c1:f0:f0:f0:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b969f7f9-c085-43a1-ae91-ac081f42450c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:14:24:9f:b5:7d:4b:fc:07:50:a3:e9:17:76:
                    6f:13:65:56:fc:10:da:cf:15:71:59:4a:bc:10:3e:
                    e8:d9:76:f9:25:29:90:f0:79:97:d3:3c:99:cb:18:
                    e8:71:a4:2a:b8:3f:67:e4:40:38:70:af:d9:be:65:
                    2e:ab:9a:20:5f:a2:b2:5d:a5:51:0d:a8:49:56:79:
                    0d:ba:00:41:41:1a:93:f6:0b:e0:40:33:2f:86:3e:
                    6a:c9:a1:fa:da:96:38:c2:0e:af:3a:ba:16:35:89:
                    37:f8:4a:4b:6b:14:43:03:c4:87:e2:9f:42:55:a1:
                    73:36:61:8f:4f:92:a7:dd:f0:05:91:16:c9:95:bd:
                    dd:ee:db:24:b4:c7:60:11:23:6d:0c:e5:6d:12:af:
                    4d:42:dd:9a:57:3b:11:29:0e:48:8c:ec:78:b8:06:
                    8c:f4:c7:7e:5a:4f:fb:6c:cf:50:b9:10:85:49:c3:
                    fe:dc:2f:a1:89:85:d0:47:b7:49:f1:02:06:35:38:
                    23:ba:cc:81:d8:11:00:c7:17:2b:8a:72:9b:6f:4d:
                    f2:9f:ca:a9:33:9a:b0:e3:a2:d5:6a:69:33:89:15:
                    64:0b:98:4c:d7:12:56:24:07:8e:c1:14:59:e0:0c:
                    18:d5:fe:7e:f1:bc:08:83:0d:63:b8:76:55:f1:40:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F1:AD:11:62:A8:93:E1:B0:CA:5E:E5:DF:62:ED:95:75:17:03:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84700b5-be90-3712-8a4c-b001e65ca1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:a7:9c:71:1f:27:31:4f:92:40:87:83:cf:c3:59:59:38:
         8c:88:06:d0:c0:5a:5a:b2:42:ad:62:d6:25:e5:f8:60:59:ea:
         5b:c9:11:28:8f:c2:a8:97:9d:bb:fa:c5:e6:bf:d6:06:cf:84:
         c7:a3:d4:89:b2:6b:fb:57:0e:22:c8:78:47:ef:73:c5:34:ab:
         bf:bc:e2:0f:f7:cc:44:8d:fe:e2:4e:02:c6:50:a5:de:33:8d:
         83:ba:7c:a1:fe:ea:2b:37:03:bc:7b:7a:70:e8:87:12:70:58:
         a9:a3:65:3b:cd:56:47:0b:f0:87:6c:96:25:a8:dd:bd:4a:ed:
         c3:49:c5:5d:25:c0:f4:f4:45:8d:d8:3c:db:03:32:36:6f:d6:
         2f:e3:60:20:c3:3f:8f:f8:18:5e:fa:ba:a7:b6:06:c0:94:10:
         eb:ff:5f:d9:ec:46:22:f0:b1:61:29:2f:5e:5e:28:ee:f7:71:
         a4:40:02:8f:64:bd:6f:6c:5b:68:c1:20:51:fa:7f:62:ad:68:
         2d:c5:ae:6e:b9:2f:35:b6:4a:21:77:cb:b6:e0:cb:6b:64:6f:
         bb:61:80:06:a6:54:59:d4:47:be:85:31:97:e2:44:1e:a2:29:
         5c:9a:74:d2:09:3f:03:cb:4d:97:db:7b:45:b0:fb:77:a4:c3:
         cb:88:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:25 2026 by rpki-client