Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7755a6-6e8a-3d00-8edf-24c0fb1f44e7.roa
File:                     0b7755a6-6e8a-3d00-8edf-24c0fb1f44e7.roa (raw, json)
Hash identifier:          Nfq+t356bDYdTteOj2pkDXAPsQkarPs/qLWSFA2i4h4=
Subject key identifier:   50:7A:57:5E:CD:B7:47:04:00:E9:8B:05:66:FD:A8:8E:AE:A1:8B:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B3B7F07A4F34DC5D79180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7755a6-6e8a-3d00-8edf-24c0fb1f44e7.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     396581
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:3b:7f:07:a4:f3:4d:c5:d7:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=7d38dc78-ad69-4d06-aa88-c094ba6a40db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:9a:27:ec:a8:e1:cf:6d:ed:c0:36:c0:45:
                    5b:45:cb:39:1b:38:d6:5d:a0:11:db:c9:13:1f:0a:
                    f6:31:1c:ad:af:3c:ad:2e:0d:28:99:8d:15:57:75:
                    e1:2e:8c:72:00:31:88:b8:27:a1:b9:21:9e:eb:e5:
                    e9:7e:06:01:2c:81:80:85:5d:e9:c4:cc:41:2f:a9:
                    f2:32:63:a8:95:14:d9:6b:d1:d6:54:7f:9b:29:a7:
                    7a:8e:c9:3e:54:15:21:b3:e7:f7:f5:a0:29:1a:fb:
                    4d:57:fa:f8:54:2a:97:af:b3:7b:d8:04:86:cb:19:
                    79:ae:84:be:c7:18:46:4d:8f:ef:61:5f:8e:9f:ef:
                    bf:6e:6a:d6:39:49:58:c9:7d:15:eb:b7:67:4b:0e:
                    ed:8e:56:d0:e5:ee:e2:1a:16:9b:bb:cd:c0:66:40:
                    79:d8:b7:02:fe:8a:17:e5:50:98:e4:ef:6f:cf:69:
                    75:d3:48:46:b6:15:c5:2a:4a:fd:f5:9d:bf:e3:ba:
                    0e:39:cf:b0:f6:26:01:49:7f:3b:fe:ba:0d:84:a6:
                    82:1e:d3:b5:75:f3:02:e0:12:5c:74:7f:c3:1a:43:
                    e6:da:48:be:73:60:53:42:69:e4:30:9f:8f:e6:27:
                    f8:f8:cc:db:70:70:a2:b2:ed:16:21:ec:4d:38:e7:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7A:57:5E:CD:B7:47:04:00:E9:8B:05:66:FD:A8:8E:AE:A1:8B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7755a6-6e8a-3d00-8edf-24c0fb1f44e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:56:29:f7:4d:61:5c:79:cc:70:fc:d2:ee:0d:a1:b8:cc:8d:
         d5:a9:da:1f:3c:05:96:81:56:9c:61:63:00:9f:e5:ab:d4:d2:
         45:06:0c:4c:2f:af:5e:95:6b:16:81:51:35:c6:d0:05:da:90:
         0f:06:51:88:ec:66:15:de:41:51:94:30:4a:b6:84:1f:32:19:
         f5:29:13:9b:83:fd:4d:72:fb:90:c8:0e:4e:fb:1e:9b:49:1c:
         a9:d2:85:b9:16:61:c4:e2:e7:a3:15:0d:7a:42:78:90:2a:d3:
         c6:bc:cc:0b:e3:38:89:5c:71:aa:9b:fb:f7:95:fd:5c:6c:99:
         11:2d:c6:12:89:1e:b0:30:08:0e:90:98:27:1a:b3:db:72:84:
         39:a5:3e:2b:85:4e:7a:ba:ae:18:39:c8:5e:23:59:d4:13:41:
         4b:76:65:1f:e4:9e:4d:e1:ba:e9:75:b6:29:56:73:7e:64:59:
         db:3a:c4:00:a4:d9:6f:29:af:d4:28:31:9d:2c:01:dc:91:86:
         25:54:cb:27:1f:72:2b:08:bd:3b:a1:af:2c:13:27:e4:ce:8c:
         a6:01:01:63:5e:c4:fb:8d:5b:71:23:1e:79:72:36:70:0e:f5:
         7f:e4:29:e6:d1:6a:78:b4:ec:0a:57:bf:c9:7f:87:4d:8a:0a:
         d2:3e:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:46 2026 by rpki-client