Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c1d416e-d631-38d6-a53a-9c2b884286a4.roa
File:                     8c1d416e-d631-38d6-a53a-9c2b884286a4.roa (raw, json)
Hash identifier:          SCc+HmLjIT1hyftb5rELGxt931OYv0MJ5NLsccRdsf8=
Subject key identifier:   AC:9F:74:E3:CE:90:1B:C2:21:36:88:A8:09:66:5C:97:9C:49:0A:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B2035BCBB4E6BDB82DEDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c1d416e-d631-38d6-a53a-9c2b884286a4.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     27544
IP address blocks:        2001:500:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:03:5b:cb:b4:e6:bd:b8:2d:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=c5d6ce22-0b2a-468a-a9a5-efaa306b3817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:d6:0b:b0:7b:00:b7:fe:3c:3f:e6:3c:17:
                    a1:e3:4d:bb:49:7e:64:c2:cf:15:e7:8e:e3:1e:75:
                    23:77:52:9b:fa:1e:16:b6:13:4d:3f:10:dd:70:32:
                    75:ea:5c:2e:a6:60:43:cb:62:22:0a:31:7d:e3:26:
                    ec:00:58:40:76:51:40:b9:95:b1:23:d6:ff:6f:40:
                    ce:5c:fc:0f:e7:8b:24:e2:48:0f:5c:30:3b:f7:1c:
                    b2:88:1d:86:b9:76:84:69:ed:f8:57:c4:ab:a6:36:
                    73:b0:47:10:7e:62:a4:2b:dc:51:4b:67:fe:3f:73:
                    b2:1a:2a:39:3b:f3:d8:ec:5a:bd:86:c1:aa:4d:97:
                    e9:72:17:03:cf:ae:07:8f:ed:9a:cc:53:2e:5e:b9:
                    ba:e3:94:bf:b5:30:e2:c8:96:4e:75:83:68:15:60:
                    fc:3f:31:e0:4e:b4:9d:42:47:12:3f:f2:93:d9:e6:
                    f0:93:f3:4c:bc:68:42:07:1d:35:65:25:30:53:db:
                    d5:40:bf:96:16:82:c8:3a:3f:bb:86:70:fc:ed:98:
                    82:9f:cc:0f:63:5b:47:e1:d5:5f:1b:70:4a:0a:29:
                    87:4d:06:4d:a3:4f:0d:64:e7:c2:2a:08:90:4f:34:
                    2a:54:a1:99:e6:4c:10:92:5f:fa:81:58:b0:aa:fa:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9F:74:E3:CE:90:1B:C2:21:36:88:A8:09:66:5C:97:9C:49:0A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c1d416e-d631-38d6-a53a-9c2b884286a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7d:44:3d:f8:9b:cc:47:bb:6a:1a:0a:86:7a:bd:d9:c9:4e:
         6f:28:41:de:f4:f3:24:ff:ba:f9:19:e5:cc:ee:65:a5:7e:5a:
         29:6e:d0:a1:dc:73:ab:ae:8f:2d:e4:a1:8b:7e:63:b8:76:39:
         2e:cd:8c:0c:5e:76:b8:fc:4b:10:e4:32:52:e1:bb:f5:b0:1f:
         a2:4e:b1:bb:08:6f:06:a6:1d:ca:37:76:16:1e:76:a9:f5:d2:
         09:aa:94:56:85:85:38:d2:fe:dc:14:6b:71:e6:41:4e:47:9e:
         a2:ab:b6:98:0b:c7:28:ba:9f:6d:78:3b:23:21:ce:12:34:58:
         45:99:33:61:a1:a5:c5:3f:2e:9a:51:e0:93:10:0c:39:03:11:
         0c:d8:ec:73:ca:65:bd:67:98:7e:d3:3a:22:b6:b3:08:bc:f2:
         73:05:fb:63:bb:fe:74:fc:f1:2f:23:58:5f:19:52:63:49:6f:
         cb:34:16:31:09:25:22:de:72:cb:e6:9e:bc:e1:ab:b8:f7:c6:
         eb:c7:77:e2:6f:d0:55:1f:69:5c:cd:19:84:cc:e3:3c:d5:e0:
         30:17:07:15:89:f4:f0:6b:fc:77:2f:a9:91:31:90:ae:4b:8f:
         70:02:b4:bd:ab:07:5c:15:b4:79:bd:55:9e:ff:7c:a3:cb:9f:
         d6:6d:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:43:30 2026 by rpki-client