Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/075d8eee-cf68-3dec-b440-0f8043d71fb7.roa
File:                     075d8eee-cf68-3dec-b440-0f8043d71fb7.roa (raw, json)
Hash identifier:          FUmindbtqMPNWbOgEZSJ0J6Aah7nKwS9Jwa8gq48fMI=
Subject key identifier:   CF:3C:FB:62:AE:2F:D9:49:21:D3:E4:70:18:16:CC:18:C1:5B:CC:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F19FCF0CA1704E5F8D1B28F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/075d8eee-cf68-3dec-b440-0f8043d71fb7.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:f0:ca:17:04:e5:f8:d1:b2:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=dd5b27ba-fde5-4f1e-bbff-e950cdb300b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:44:56:b7:2b:68:d4:f1:15:e2:65:83:e9:bb:
                    7e:ca:7e:a0:d4:92:55:be:bc:2d:35:c6:5e:5d:01:
                    fb:96:3f:2b:c3:80:67:9e:36:c0:9a:7e:c4:f2:92:
                    8f:55:3e:b8:c4:43:6c:d5:17:96:f3:3b:62:57:34:
                    f5:f4:ff:22:16:80:4f:fa:d9:a0:f3:f7:f3:b9:cc:
                    b6:42:12:28:f0:a4:dd:73:87:f5:dc:aa:d8:b1:92:
                    5b:8d:d3:7d:b2:a5:42:00:3d:81:96:f7:01:0b:a6:
                    6f:ae:6c:db:d2:13:6c:bd:1b:82:2f:e6:72:8f:50:
                    d8:87:08:88:6f:74:16:6b:02:b5:6c:bd:e7:49:7c:
                    de:75:e6:83:59:be:6b:8a:76:f7:b9:58:98:4c:3a:
                    a5:9d:19:b9:24:c5:b7:76:68:51:98:11:f3:6d:36:
                    c6:cf:2d:01:72:ca:c8:8d:1d:8c:2b:c3:53:44:0b:
                    1b:70:6f:8e:6d:f1:64:b7:a7:54:6d:72:d2:90:d8:
                    18:2a:32:24:f1:f5:31:a6:b4:b7:e1:a1:c3:ec:5a:
                    d5:4d:35:c0:6b:65:3a:1d:f5:22:57:62:fd:af:34:
                    82:9d:27:03:92:b5:e3:2d:93:e2:7a:ee:2c:37:16:
                    42:e2:34:bd:25:85:c6:f1:b4:1c:2f:d3:87:e3:bf:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3C:FB:62:AE:2F:D9:49:21:D3:E4:70:18:16:CC:18:C1:5B:CC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/075d8eee-cf68-3dec-b440-0f8043d71fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:32:e2:f3:05:98:5d:11:40:07:b9:ec:92:90:3e:79:a1:
         85:70:84:62:b2:b7:8c:8c:1b:7c:0c:4b:87:2d:8c:c9:58:ab:
         e6:77:2d:33:75:82:36:a9:14:45:a4:fc:91:11:d6:62:a8:bf:
         d2:4a:66:70:5e:98:e8:05:41:c1:00:84:88:4e:11:aa:4b:6e:
         ad:4e:82:0e:65:5f:c9:a1:cf:2d:7c:86:95:ce:e3:0f:ca:08:
         7f:2a:a7:c7:f4:fa:ff:ac:7d:e3:f1:3e:00:21:b7:ae:59:17:
         68:6e:77:5c:75:c6:78:f6:11:00:17:f5:ec:e4:97:88:47:37:
         ef:de:39:7e:a0:92:aa:2d:83:b8:7b:f9:b7:65:bc:55:ea:ef:
         67:ad:12:25:46:5d:89:c3:09:fb:19:77:e8:1f:ca:c8:06:1a:
         57:9e:b0:f3:27:f5:5f:bb:c2:bf:20:b5:95:e1:c4:55:fe:b9:
         18:9c:06:7a:b2:1d:08:41:5a:8a:5f:ce:a1:f6:bc:9f:69:bf:
         b8:2b:29:06:91:59:f8:5e:93:55:d2:23:5f:f5:85:66:31:6a:
         79:f7:9a:ba:f2:3b:45:17:b9:fe:91:d9:eb:46:68:8b:93:51:
         e3:8e:4e:87:5d:bf:fa:b8:2c:63:88:b1:20:89:00:91:31:a6:
         e1:76:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:54:38 2026 by rpki-client