Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e318b93-d94d-39d1-8ed2-72987db51171.roa
File:                     3e318b93-d94d-39d1-8ed2-72987db51171.roa (raw, json)
Hash identifier:          mTqkxxjIxMgBHXvZ7y9UZOKmSXPBxKcYTiDBK+v/rSI=
Subject key identifier:   58:64:40:CA:2B:52:E5:5A:FF:D0:AA:99:F9:0F:0B:97:0C:BA:B4:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CA7FE1E9C364C3B34F480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e318b93-d94d-39d1-8ed2-72987db51171.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     40647
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:a7:fe:1e:9c:36:4c:3b:34:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=17c0ba3f-580c-46e2-9195-202c8b59cbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:5d:f5:09:57:cb:60:e4:47:79:7d:06:e1:
                    72:af:20:01:95:25:49:7f:30:e4:8c:86:29:38:92:
                    8b:2d:29:23:d7:09:84:79:a1:2c:b4:9b:c6:82:47:
                    c4:9c:69:22:e6:dc:08:48:d0:17:2f:37:70:4c:f5:
                    14:bc:09:bb:7e:bd:de:a5:a5:59:56:9d:ab:d1:1d:
                    6d:c1:cb:5c:6f:60:5f:1d:3a:27:54:e8:0e:a1:4a:
                    70:d4:df:e3:08:a8:97:f1:3b:66:41:fe:f6:77:b1:
                    c4:90:35:f4:31:6a:16:cd:0e:cf:c3:cc:6e:b6:7d:
                    0b:e7:7a:ec:16:13:9e:29:6e:f7:e1:9d:d8:3b:6a:
                    6b:e1:2f:54:5f:41:94:73:94:e7:cd:8d:66:0d:d0:
                    cb:ce:a7:63:5f:7d:11:92:c6:24:d4:4b:42:d1:8b:
                    88:a1:83:ee:5c:6e:84:1a:66:ef:b3:e1:f4:7e:ce:
                    b3:7a:c9:91:9c:1d:d2:96:d5:0f:71:e3:7a:cf:05:
                    d5:54:86:40:45:97:9e:df:af:cf:b8:87:ae:35:a7:
                    ee:cc:4b:56:79:1f:6d:d4:bd:97:2e:f6:02:8a:28:
                    e7:d1:5f:53:1b:32:c9:3f:9f:05:f1:7c:36:da:25:
                    18:a3:8e:79:86:1d:bb:bf:59:fb:9f:33:00:16:22:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:64:40:CA:2B:52:E5:5A:FF:D0:AA:99:F9:0F:0B:97:0C:BA:B4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e318b93-d94d-39d1-8ed2-72987db51171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:49:ea:b8:6b:ba:45:18:77:39:26:66:0d:24:fe:65:89:fd:
         f3:1f:12:0f:3e:5a:f8:c3:67:17:c4:06:a8:d3:94:dd:91:83:
         7c:a5:41:3f:5c:3a:23:81:96:c1:b7:ec:4a:70:dc:ab:18:6f:
         47:c2:12:2c:d7:ae:d1:b7:ac:13:65:dd:8c:9a:ee:11:c8:0e:
         aa:88:f5:8a:4c:a2:26:4b:bc:92:43:ed:c0:9b:0a:ff:35:66:
         33:bd:00:87:13:c3:12:ba:ad:77:a8:e1:63:23:30:42:04:21:
         e4:e0:26:a1:8a:08:b1:5c:2f:8f:04:36:9b:ec:2c:0d:c1:8f:
         0b:42:32:1b:bb:78:01:6a:dc:43:f8:6a:57:61:92:81:45:3a:
         78:51:bf:09:50:65:38:15:89:45:5b:cf:2a:dc:61:39:d1:d6:
         be:93:29:99:a7:c3:a9:a9:f3:b6:72:d6:0f:21:0b:7e:da:50:
         9b:04:5f:89:73:a4:3b:c9:30:61:d6:ea:1e:dd:75:4d:5f:52:
         dd:98:00:d8:19:e0:34:5f:e9:9e:de:49:6b:4e:1a:20:f2:2c:
         ac:dc:ff:8e:3b:29:ff:ab:82:5a:68:52:71:51:c1:d2:7e:89:
         62:99:22:71:1b:be:6a:15:f1:94:ba:17:24:81:91:99:94:a6:
         12:a7:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:39:54 2026 by rpki-client