Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e9b8a66-cfe9-30ab-acd9-ae8702718f03.roa
File:                     9e9b8a66-cfe9-30ab-acd9-ae8702718f03.roa (raw, json)
Hash identifier:          40mqONotdIUs4Gzvc5jEUL4NQFsuw6YhGx4zaO9eArA=
Subject key identifier:   4C:43:B3:7E:76:70:72:5C:9E:0B:47:96:03:75:B9:05:50:0E:A7:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B2065C7EA738CD113AF580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e9b8a66-cfe9-30ab-acd9-ae8702718f03.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     396584
IP address blocks:        2001:500:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:06:5c:7e:a7:38:cd:11:3a:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=fa2253a6-feb8-4cd5-96b8-1a705cc1d5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8f:fd:87:41:7e:83:e3:be:c4:cf:77:22:9d:
                    af:ac:9a:5f:25:fc:61:0f:68:5d:35:af:19:cd:e2:
                    0d:b2:8c:1d:d5:dd:1d:82:b3:99:d7:a1:7d:73:20:
                    f8:5a:66:61:f4:41:16:c5:9c:ad:dd:c0:6f:58:81:
                    dc:be:1d:8c:2d:9c:80:91:24:cc:cc:4c:bc:09:e9:
                    eb:f6:76:3d:07:70:9c:8e:06:1a:13:b5:0b:44:44:
                    0e:d7:a2:36:57:c7:5b:7d:5e:2c:d6:81:f4:ea:7f:
                    07:d2:3c:1f:8d:2e:42:8f:5f:37:26:4c:0e:07:38:
                    8e:6b:5e:f4:1f:f7:ee:fc:57:45:9f:ac:13:22:03:
                    e8:b5:b4:75:58:bc:79:1b:3e:86:b1:80:23:ad:39:
                    b2:19:1f:44:b3:8a:68:6b:01:2e:9e:46:46:ee:c9:
                    6f:49:0a:4a:5c:a0:23:ff:b6:d2:c9:a5:7e:8d:88:
                    70:00:30:b4:09:08:19:2e:7a:f9:f4:b2:6c:7e:cf:
                    c0:ed:49:9f:d3:63:f4:61:8c:28:b1:57:38:d6:35:
                    12:6e:3e:5b:3c:5f:dc:f2:ac:ed:ce:3c:19:ec:73:
                    48:a2:f3:8f:2c:0a:d6:be:81:d3:39:20:4d:ad:aa:
                    60:a7:9d:3e:07:3c:e9:c4:ae:e2:b5:44:33:f2:cc:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:43:B3:7E:76:70:72:5C:9E:0B:47:96:03:75:B9:05:50:0E:A7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e9b8a66-cfe9-30ab-acd9-ae8702718f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:14:f0:88:1b:4a:dc:6d:74:3d:b7:52:e7:94:7e:78:37:ac:
         f5:04:1a:94:72:88:2c:e7:95:5f:74:4a:d3:06:c7:b3:54:a7:
         c9:17:ee:54:83:d0:cf:59:fc:62:3a:f3:73:84:0c:ea:41:e6:
         8b:fb:e2:62:ce:0f:6a:3e:df:f1:87:fa:5a:59:05:c1:6b:c0:
         e8:c7:b6:ac:f7:a1:58:10:69:97:3e:8a:b7:ce:66:56:59:6e:
         bd:88:13:25:dd:f1:45:0f:58:c1:46:6a:66:d3:ac:71:c3:e2:
         f4:ae:ac:7b:08:64:68:3c:20:f7:ef:7f:49:e4:24:7c:6b:e1:
         55:ba:bf:bd:4a:a3:ce:ca:ad:50:65:86:1c:03:49:c2:a0:d3:
         da:db:57:da:e2:f1:ce:7c:09:22:ef:ea:09:a3:75:91:86:53:
         73:3a:86:aa:2f:0e:b6:c9:ae:48:50:51:7c:47:cb:00:b9:a5:
         ea:a7:d3:48:cc:1c:f3:2a:68:0e:5d:03:bf:48:a3:9b:c6:94:
         09:0c:67:03:2a:0b:44:a2:ed:6b:8f:d2:07:c6:b0:ff:03:2a:
         83:e6:0f:45:51:a3:2f:1c:a5:31:00:89:0f:68:9e:c2:1e:fe:
         0e:d9:75:64:24:b3:e2:a3:24:8c:65:c5:5e:2f:f9:8e:7a:06:
         38:95:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:53:08 2026 by rpki-client