Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4614347a-3fb5-3759-a773-6a62396d077d.roa
File:                     4614347a-3fb5-3759-a773-6a62396d077d.roa (raw, json)
Hash identifier:          ZgeJlxetf5L8EhvjSvLozmlpP8jPD+EgaEw6YqtJtqs=
Subject key identifier:   54:11:F3:7B:F0:AE:7F:AB:05:F2:9E:FA:28:6D:F1:5E:0A:76:60:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF18224473689622DD1963080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4614347a-3fb5-3759-a773-6a62396d077d.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     396541
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:24:47:36:89:62:2d:d1:96:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=f32deac8-0fd0-4ed6-a2ff-6e845dda7b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:44:26:ed:80:80:f1:a8:39:1d:49:20:82:
                    73:05:1e:2d:48:69:84:70:69:52:15:0c:9f:4e:dc:
                    c8:55:f2:fe:57:c6:db:10:29:55:60:05:b0:e8:dd:
                    3f:79:ff:a9:f0:8d:ec:f5:ed:a5:a6:66:4c:91:94:
                    51:2f:05:bb:e9:e3:2c:1a:72:b3:cc:23:7f:e6:ef:
                    e0:f8:5a:f6:8c:bb:62:ad:3d:c3:4b:73:f2:ec:39:
                    17:93:bc:7c:4d:af:74:ee:1b:d6:bd:b2:50:04:b3:
                    8f:f1:f3:e5:23:57:b7:80:29:05:6d:21:5a:6c:77:
                    ec:fc:96:48:51:f9:cf:d9:36:51:c5:de:2e:ba:98:
                    00:32:5d:0a:42:70:cb:59:c0:ac:77:2f:8f:95:5d:
                    e0:fa:5c:ad:d6:2e:8d:dd:89:e8:03:dd:b5:32:21:
                    15:62:a7:13:a5:d2:02:9d:15:ca:f4:33:a0:59:98:
                    f2:7f:71:87:db:40:45:f1:09:a8:2f:bf:51:cf:5d:
                    2d:31:1a:79:b9:cc:18:e8:31:bb:4e:e1:78:68:47:
                    9d:b8:66:14:33:14:8d:c3:d2:d1:a4:3e:2f:10:91:
                    5b:22:d2:bd:46:09:3e:57:29:7a:7c:ce:e1:10:80:
                    ac:b9:b3:7f:86:86:79:0b:57:18:b7:6f:c4:ce:27:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:11:F3:7B:F0:AE:7F:AB:05:F2:9E:FA:28:6D:F1:5E:0A:76:60:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4614347a-3fb5-3759-a773-6a62396d077d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:0b:22:9e:68:55:02:39:bb:97:57:0c:55:ad:6b:14:d1:6f:
         6c:77:6f:2f:d2:44:05:0f:0b:57:f4:31:cf:0f:66:19:26:d3:
         39:1a:0f:50:b8:04:5c:42:65:fc:0d:50:60:d4:91:a0:99:54:
         0f:8b:b5:5b:02:68:04:f2:75:24:d7:74:a4:93:d1:26:b0:b8:
         fe:a0:45:9a:dd:69:75:09:d7:8b:e4:19:13:b0:d1:8a:e6:12:
         6b:bd:53:2a:ee:6d:08:c1:58:92:10:2d:09:94:a1:b7:09:08:
         d3:e5:5c:32:67:73:3e:34:a0:9d:53:55:67:1a:66:95:35:5d:
         83:2c:6e:ec:62:21:68:5e:22:81:18:ce:da:2e:09:a5:cb:17:
         b4:04:8f:eb:ad:33:55:1e:c2:98:43:c9:fb:41:bf:ec:04:38:
         50:b3:40:ec:f2:34:02:91:5d:a5:a7:2e:32:14:c7:11:50:a6:
         07:5f:e2:d9:37:a9:c8:e4:99:fc:e2:cd:b5:9d:83:74:c1:28:
         40:12:5d:e2:f3:e4:3e:b7:7f:7b:48:ef:37:e8:a7:5d:2f:ba:
         ba:4b:6f:fe:c5:c8:47:fa:47:b8:4c:0b:d7:ec:e2:3f:05:2c:
         da:5b:45:92:10:b0:0f:52:02:87:73:bc:92:c3:b5:b6:7d:b4:
         95:24:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:26:12 2026 by rpki-client