Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c57e7dd-b081-36c1-b62d-8f76e3d82bb2.roa
File:                     7c57e7dd-b081-36c1-b62d-8f76e3d82bb2.roa (raw, json)
Hash identifier:          fCg8O1g+18bfapQTVzpk1OEbz/HtXLkKMMmIBTudkfw=
Subject key identifier:   61:5F:9E:B5:EC:18:56:BD:34:1D:F7:05:DC:2B:B7:07:03:68:05:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF18214D5A6CA1DFA1B96750C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c57e7dd-b081-36c1-b62d-8f76e3d82bb2.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     36624
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:14:d5:a6:ca:1d:fa:1b:96:75:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=bcba9cb0-b2f6-411c-bd9b-94bbabccf541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:d3:80:4c:c0:6f:20:09:13:67:84:e5:29:
                    07:76:13:4c:d3:ab:a2:ba:0e:23:21:78:88:12:b8:
                    ce:03:45:1f:93:b9:cd:5d:dd:a6:18:ff:dd:ef:09:
                    82:22:c1:ca:c5:16:8f:cd:f1:9d:56:dd:5e:7d:c7:
                    e1:0a:81:c9:6f:d1:ed:8c:ee:95:32:83:a5:e6:58:
                    03:ae:b4:a9:33:69:b3:02:06:2f:02:1f:37:7f:bc:
                    5e:28:27:1c:7e:92:8e:6a:84:0c:e4:e3:91:8d:09:
                    b0:9d:f7:b1:40:73:8c:04:39:e1:69:6e:0b:07:42:
                    64:fe:af:8a:53:dc:54:31:a6:18:1d:89:2c:f4:80:
                    22:da:85:a5:f1:8d:88:0f:98:38:c9:06:69:36:d4:
                    97:d6:f7:58:04:64:a4:2e:9e:99:c3:95:50:8c:ba:
                    b7:77:08:98:55:87:aa:e0:54:61:5a:f0:77:80:49:
                    81:c7:a9:a9:33:b7:a6:4b:0b:93:41:c0:e2:80:11:
                    bb:83:ec:12:44:e7:9e:71:da:7d:85:e8:e4:93:1f:
                    33:5d:79:c5:0f:13:53:2a:ed:bc:b8:fb:b3:a0:d2:
                    f2:d0:a8:33:b3:d3:14:46:2f:f1:05:6e:7a:69:be:
                    59:c2:51:c0:19:f0:c9:82:da:0f:80:7d:73:a1:1e:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:9E:B5:EC:18:56:BD:34:1D:F7:05:DC:2B:B7:07:03:68:05:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c57e7dd-b081-36c1-b62d-8f76e3d82bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:77:1b:ca:75:b7:0c:13:12:c2:d9:23:7c:25:a2:6b:21:
         14:9b:4b:50:e1:ef:d9:32:fd:be:a8:96:bf:38:c8:3a:6a:a9:
         80:29:36:67:04:d4:bc:29:4e:58:b1:5d:c4:75:8b:c8:55:c7:
         9c:86:62:d3:d7:33:31:1a:14:17:e2:f8:f2:c1:a6:be:ce:07:
         79:98:39:c0:03:07:4c:a0:cd:0e:c2:b3:00:9c:ff:41:c0:cb:
         61:27:fa:c7:dc:88:da:a4:fb:b0:ef:59:0d:e1:28:80:c8:31:
         47:a6:b3:2c:bb:66:2c:f0:a3:39:ab:6f:5f:30:b7:ec:09:bf:
         e4:09:6e:75:17:3e:7e:51:3c:0d:72:2e:f3:c4:e6:c3:19:8f:
         3b:ee:c0:6f:51:05:1d:57:65:f9:b0:d3:63:0a:de:a5:77:ad:
         f9:57:56:49:fe:15:9d:39:4d:eb:c1:5e:31:10:2d:10:34:7c:
         a8:24:a8:49:fd:0b:19:bf:8e:49:d2:08:be:f1:76:62:35:ad:
         23:1f:2d:b8:52:9d:15:4b:f9:79:cf:a3:f4:81:d0:36:3c:15:
         23:ee:68:8f:d3:42:9f:ac:cb:6c:3e:c2:ae:09:1a:c1:90:dd:
         90:74:b3:b9:5e:70:b2:83:23:87:9e:d5:d6:8f:a9:4b:64:26:
         77:78:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:45:12 2026 by rpki-client