Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffe833b-02ef-33fb-9529-74ddc1ddeb19.roa
File:                     fffe833b-02ef-33fb-9529-74ddc1ddeb19.roa (raw, json)
Hash identifier:          pG+H/6l6dWztaMTblQHHeQI8uZkqUbYvqNNrPcJt/Jo=
Subject key identifier:   C4:A1:06:FC:82:B1:56:0E:E2:B3:A8:D6:FE:42:2C:4C:DD:CD:32:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79D4825DF2C67D355DC0680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffe833b-02ef-33fb-9529-74ddc1ddeb19.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396571
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:48:25:df:2c:67:d3:55:dc:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df394ea2-39cd-4ad7-8e8c-7161c18f0152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:1f:e0:d1:60:e4:f9:b1:6f:9c:09:59:26:
                    03:1a:a8:ac:b1:fc:f5:3d:f9:05:9a:0b:6e:e2:25:
                    c2:87:da:d9:8f:b2:f2:80:15:d8:eb:29:c0:fb:08:
                    c5:98:a7:36:39:63:d7:db:f8:15:02:d9:8c:21:24:
                    ed:21:8b:92:aa:27:25:12:f9:25:0d:0d:d8:d7:83:
                    15:1e:d1:e3:4e:cb:6f:fd:64:d2:4d:80:2f:b4:73:
                    69:a3:59:07:8d:6f:ef:29:b5:af:f9:1f:9e:eb:f2:
                    4c:94:04:24:94:2e:8a:8f:9d:39:37:28:90:15:49:
                    50:89:25:43:86:db:85:b4:b8:1c:aa:7d:9e:49:c9:
                    26:c9:d5:62:dc:64:63:6e:7f:e0:16:90:d7:91:cd:
                    3d:09:7b:71:f3:39:25:47:98:53:0f:13:45:c2:11:
                    9e:9e:96:4c:57:5c:15:b5:2d:ac:65:dc:7e:fe:76:
                    fc:5d:3c:b3:cc:ba:3f:41:87:4c:76:32:f6:07:39:
                    38:f1:f9:73:68:6b:0a:c5:63:02:87:e7:7a:1a:ce:
                    b2:3f:3d:7e:48:bd:23:b1:2c:1a:78:81:e3:48:27:
                    fa:a6:18:5a:51:11:be:2a:29:7b:c4:9b:c6:9e:66:
                    ae:ec:c9:ed:10:18:de:8b:e4:a2:a4:20:d8:58:b6:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A1:06:FC:82:B1:56:0E:E2:B3:A8:D6:FE:42:2C:4C:DD:CD:32:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffe833b-02ef-33fb-9529-74ddc1ddeb19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:e5:c3:94:f7:b9:52:99:f4:fc:9b:e7:15:cc:4b:9c:dd:
         9b:c0:df:3b:92:ca:f0:4e:71:c5:3d:24:1d:f6:7b:03:8f:4a:
         0c:ec:64:fd:90:ff:9b:ab:ef:8b:3c:64:84:d1:db:e2:ea:64:
         37:09:fe:a3:79:87:e9:a9:4a:15:3b:a0:6c:a0:7f:3b:b3:c8:
         8a:fa:c6:fe:95:3d:30:38:65:48:e7:94:7f:77:ff:3f:3b:d5:
         8a:a6:be:45:7c:dc:00:13:df:a9:05:ea:48:9b:38:4a:03:ba:
         e6:84:f5:3f:df:ad:a0:4e:d0:c1:fe:20:80:a2:79:ab:95:dd:
         0f:8c:58:76:ff:75:1d:d8:b2:4f:e1:7c:d4:73:68:ed:3b:b0:
         13:58:c0:8a:8f:db:f4:84:d0:da:a9:9a:e2:79:a0:82:1f:13:
         89:f9:e6:8b:55:23:4f:3d:ac:a8:5b:99:aa:ea:00:15:a5:81:
         5a:31:aa:98:25:e7:a0:52:37:53:7a:c8:46:a5:91:f7:af:0b:
         c6:ae:d9:c8:bc:d5:b4:aa:dd:33:77:81:9f:59:0b:6e:30:1f:
         ea:e7:8f:a8:39:f6:e7:32:c3:08:61:d8:94:c8:2e:7d:0a:7a:
         2d:de:e7:c6:b1:f7:15:a8:ce:3f:ea:da:ba:5a:cc:47:5f:4f:
         1a:d7:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:15 2026 by rpki-client