Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4824d2a-9de8-3c6c-83e8-282f2cedd00a.roa
File:                     e4824d2a-9de8-3c6c-83e8-282f2cedd00a.roa (raw, json)
Hash identifier:          d0FMNSPAZSQ+DZYx1xTUQ9n7G5ygHRTBWLgV2vd4mwE=
Subject key identifier:   62:25:88:B5:68:BB:44:C9:7B:71:58:C2:2C:92:3D:7F:25:99:38:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EDC91E75EEA1443AA7159E5E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4824d2a-9de8-3c6c-83e8-282f2cedd00a.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     396606
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e7:5e:ea:14:43:aa:71:59:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=fda6ae3a-2bae-4466-a182-33e1e18ffbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:ec:a2:f8:ad:27:bc:61:bb:8c:e0:5f:18:
                    75:8b:70:72:a1:b7:49:bd:5b:a6:fc:61:99:d5:2a:
                    1a:51:67:64:1c:5a:c9:23:bc:04:2d:76:cb:bd:0a:
                    53:60:3a:c0:66:ef:be:a6:33:76:44:c2:3b:ab:4b:
                    82:c2:d3:53:42:05:79:90:dc:b1:47:31:d5:d2:25:
                    fc:11:b7:3c:a0:b6:30:d5:21:f2:92:44:30:aa:56:
                    a7:45:73:6b:c3:96:8e:e5:0c:d3:61:7c:74:a3:c0:
                    88:b2:e3:27:56:a8:73:dc:99:2b:10:53:56:ff:19:
                    06:26:90:f6:aa:15:9c:5a:3e:d1:32:fc:c4:24:f3:
                    fb:57:58:77:61:7d:c2:68:c8:44:a6:79:3a:bd:cb:
                    52:de:84:d1:db:a3:1f:05:04:0b:62:bc:75:fa:5f:
                    29:fc:17:00:72:4e:0e:df:b0:f0:0e:72:ec:89:8a:
                    98:15:9a:ee:02:9c:e4:aa:ff:08:b4:eb:a4:83:5e:
                    89:17:68:c5:89:01:12:5b:03:df:be:76:7e:d7:d9:
                    d4:4e:be:6f:40:69:15:46:38:b8:47:78:e1:48:78:
                    03:7f:d3:71:39:b4:c3:c7:10:bb:b6:ae:a9:6a:8a:
                    74:3e:75:ad:fd:40:dd:b4:4f:94:04:cd:4c:3e:f4:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:25:88:B5:68:BB:44:C9:7B:71:58:C2:2C:92:3D:7F:25:99:38:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4824d2a-9de8-3c6c-83e8-282f2cedd00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:35:4f:ea:26:0c:e0:8a:e0:eb:13:e1:bf:c4:cf:cb:fc:
         32:5f:c5:1b:d0:b7:fc:36:70:63:03:44:f7:e3:97:d6:7d:f2:
         cb:d1:43:97:b0:3c:ff:0f:40:2d:24:5d:1e:f1:2b:24:fd:41:
         3c:7b:b9:17:14:b8:80:a2:b0:9e:44:77:c8:0d:98:8b:71:2f:
         57:1e:53:aa:ed:4f:87:49:a1:80:0a:0e:47:81:f8:17:88:7e:
         be:b5:90:43:a2:cb:84:18:35:9b:42:cb:c7:73:9f:22:f9:52:
         c7:7b:e4:34:ca:ac:d6:15:cf:db:28:4a:5a:55:42:da:a4:58:
         6a:a3:1d:ce:5d:43:00:09:5d:39:b7:86:33:c8:ba:0f:5a:ef:
         75:aa:fe:92:2a:e2:c1:92:be:5c:a4:3d:98:6a:8e:b4:ac:c3:
         8d:ac:a7:65:54:78:1d:2a:68:e1:22:e2:a9:41:68:86:a8:b1:
         0e:79:fc:0a:b2:b6:81:91:bd:43:23:20:b9:63:df:ec:cd:e5:
         86:a0:41:4b:fd:d5:a4:c7:bf:cf:cd:df:23:ea:87:04:a9:7c:
         38:b1:93:7d:44:7f:3a:be:f3:3a:ee:bb:4d:19:45:9c:aa:ac:
         30:e5:81:74:9f:3e:fe:22:2d:94:11:f5:ca:f4:b0:14:33:2e:
         7a:d3:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:30:40 2026 by rpki-client