Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ec6633-018b-33f4-8c8e-50c609a4d21a.roa
File:                     23ec6633-018b-33f4-8c8e-50c609a4d21a.roa (raw, json)
Hash identifier:          NHKQKc/S+x571vXFsQEwvSPNR8zgm1swStte5wb+eEk=
Subject key identifier:   1D:13:FA:4B:B1:C6:5D:60:AD:8D:62:90:C9:05:EF:57:A5:8F:18:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498A1D19731FE7DE12B8DFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ec6633-018b-33f4-8c8e-50c609a4d21a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396612
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:1d:19:73:1f:e7:de:12:b8:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=033480cc-cb0b-4d14-81fe-844f43cd3ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4f:5a:dd:25:4d:a3:af:8f:ce:38:97:0c:6c:
                    74:3d:d9:0e:53:36:a5:74:f9:f5:e9:38:ad:ac:8a:
                    b4:df:35:2d:74:c6:be:0c:5e:07:ec:78:a9:69:99:
                    fb:cc:d3:85:e9:89:8f:55:f5:47:c3:ff:81:12:83:
                    6e:ce:db:4d:2a:74:29:3d:de:1c:07:5c:05:0f:13:
                    9f:e3:9d:24:fe:bf:7b:f3:99:ef:ae:78:a8:23:fa:
                    e5:d4:75:d1:1f:34:a2:75:71:b7:f3:65:be:86:86:
                    b3:44:44:a9:b2:69:98:e0:72:7d:cd:11:f2:84:51:
                    18:15:27:b8:74:1a:49:f9:50:90:21:35:a9:8f:fd:
                    0f:87:db:1e:9f:1e:af:c8:c6:d5:80:5f:74:77:5a:
                    4d:30:50:92:77:be:3d:ec:09:02:25:12:1f:a6:5c:
                    69:66:1b:64:68:58:67:51:11:ae:41:01:b1:15:cc:
                    21:24:82:a6:67:84:d7:c5:60:b4:e3:03:80:32:b2:
                    8e:00:53:98:24:ba:e6:8e:c8:2e:3b:85:dc:77:f2:
                    1b:d4:9e:da:d5:9d:0c:13:66:34:33:8f:ff:ae:e2:
                    ef:f7:cc:59:72:a2:b4:49:bc:72:cd:0d:d7:6b:96:
                    94:59:fc:d5:cb:c9:69:e1:24:fa:04:d2:be:c5:c4:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:FA:4B:B1:C6:5D:60:AD:8D:62:90:C9:05:EF:57:A5:8F:18:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ec6633-018b-33f4-8c8e-50c609a4d21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ed:03:e5:90:0c:56:02:19:c2:02:d0:33:86:5f:98:ca:a9:
         34:d2:62:be:6a:d2:ed:b0:4c:b1:0d:f1:30:a5:20:1d:aa:aa:
         47:40:bd:77:3b:60:0a:28:18:a5:ed:75:4a:78:fe:4b:52:9d:
         7f:bb:9d:f0:af:29:7f:d1:0f:6e:11:30:bb:bc:24:f2:1c:3f:
         06:8f:15:67:12:a3:18:c2:84:b2:8b:4e:29:bf:21:d2:00:11:
         f9:04:e8:0d:bb:0d:fe:22:50:f7:82:e9:e1:c0:0b:e9:fd:a8:
         f4:44:49:7e:a8:49:03:2c:46:a0:c3:24:f0:ce:c3:54:8a:a3:
         7b:02:0a:ae:b8:97:0b:9e:c4:31:f4:ba:09:85:93:1e:29:23:
         cb:01:0b:39:1d:7f:f2:5d:55:55:57:df:6c:7b:54:92:f2:78:
         0c:96:d9:01:3f:a7:18:4b:75:23:26:68:f9:91:10:54:14:8d:
         9d:32:e2:9b:a2:e0:74:34:e1:8e:fb:ec:ae:02:0e:a5:3e:3d:
         48:a7:5e:5e:a8:14:e6:f1:4a:31:2f:e0:e6:98:b7:63:00:ba:
         58:61:8b:bc:92:d4:17:83:e3:a0:ac:66:e0:a2:55:0a:95:29:
         26:93:6c:7b:8f:f9:18:dd:a9:93:fd:04:f1:f9:e6:11:c1:1b:
         d6:fe:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:27:15 2026 by rpki-client