Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a63b557-8fdd-3440-89f2-839b4822c1fe.roa
File:                     7a63b557-8fdd-3440-89f2-839b4822c1fe.roa (raw, json)
Hash identifier:          nOfAkbRK8zhqpPBIZIWqXhEpkjS4Bp5O+h4MpieVxQ0=
Subject key identifier:   C5:61:77:B4:41:55:4B:91:32:56:02:D1:D6:14:6C:72:3B:04:C5:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A848408A7B6BE81E08E6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a63b557-8fdd-3440-89f2-839b4822c1fe.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396551
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:48:40:8a:7b:6b:e8:1e:08:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=0c0a441f-981d-4446-ac32-ea6f2ddf9b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:8f:f8:86:7d:27:55:90:bf:6b:51:89:4c:
                    9c:d1:c1:2d:e6:63:9d:89:6d:8e:d7:92:b7:cd:0f:
                    46:72:10:38:8e:be:43:aa:30:52:c0:49:b7:c0:31:
                    c5:38:45:82:a7:1b:47:14:fa:48:df:59:5d:27:1b:
                    b8:c1:2e:67:42:25:f7:4d:25:95:d7:e0:1f:d3:73:
                    94:9a:6b:e4:47:73:9e:c5:57:07:80:67:f5:af:03:
                    1c:fa:e8:95:d0:80:97:c1:77:f0:15:34:43:0d:04:
                    95:1b:b2:31:6e:fb:e4:29:ea:15:8f:d2:fb:2c:d9:
                    9a:e7:6f:ab:ff:d9:da:f5:35:69:3b:aa:08:65:13:
                    92:c7:c3:7f:c6:f3:57:5b:30:7e:b9:cd:d8:af:43:
                    8f:2b:03:ac:6e:70:ab:13:2c:ea:9a:71:2c:00:99:
                    51:95:92:d8:f3:c4:ad:a2:6d:72:dc:0c:d3:41:c5:
                    44:47:72:71:19:2b:d8:ff:74:6c:7c:38:17:e8:20:
                    f0:8b:ec:f5:a6:32:9b:2a:53:97:1c:07:b4:8e:1c:
                    ba:de:55:a1:61:6c:5f:5a:d4:95:34:17:94:45:40:
                    84:31:9e:e9:3c:d7:0a:d7:b7:5b:57:16:c6:46:97:
                    b6:a2:a8:ba:fd:8d:a2:41:a1:19:e4:4e:0c:6a:0d:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:61:77:B4:41:55:4B:91:32:56:02:D1:D6:14:6C:72:3B:04:C5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a63b557-8fdd-3440-89f2-839b4822c1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f4:29:88:bc:bb:5f:be:5f:66:61:72:93:6b:45:68:ee:4b:
         78:7a:8e:22:29:b7:ac:e0:9f:8d:5c:e7:35:1e:c2:27:01:97:
         b7:7a:3c:8c:1e:b3:0b:a3:78:60:9a:4a:23:db:7d:33:2d:29:
         45:c4:65:d8:49:19:d6:ee:8e:31:48:39:f0:95:e5:48:57:b1:
         50:12:c0:e2:a8:7b:2d:ce:08:9f:1f:78:de:99:1f:3c:62:58:
         f7:dd:24:b6:c4:3a:03:1a:60:25:64:bc:9d:e7:8d:6e:ff:ad:
         6e:ae:19:f2:c5:c1:6c:b6:01:1b:0f:e3:8e:e9:cf:38:cf:a7:
         b6:ef:85:e1:0b:14:35:df:d4:9e:b1:68:04:10:ad:8a:c5:2f:
         29:50:c3:e0:44:0b:cd:a5:1f:84:50:c2:e2:cf:70:25:b4:5f:
         59:c9:43:6d:a3:4b:9b:35:a1:75:ce:0e:d8:f1:3f:fc:64:8b:
         ed:cd:14:2e:bc:0f:9e:f1:63:1e:9f:6c:86:4f:ed:9e:82:35:
         17:ce:ca:76:79:c9:45:7a:6f:ce:5c:ca:02:7e:b7:37:0b:d5:
         c1:fe:42:15:d2:9e:cb:2f:81:d7:cb:49:46:20:e8:a2:f9:b9:
         3f:55:06:c6:e0:d9:4a:d2:c4:32:67:aa:e6:46:24:4b:ad:16:
         91:91:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:27:27 2026 by rpki-client