Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fb53971-9675-35ef-967c-cc3ac5a62b51.roa
File:                     9fb53971-9675-35ef-967c-cc3ac5a62b51.roa (raw, json)
Hash identifier:          GX6CLQ8uSxwWdBJUsAlCo2mF9Y+je6d7zaSJdmY2kyw=
Subject key identifier:   02:70:7C:32:B4:CD:62:1B:1F:C1:30:9F:C9:8F:A7:D3:BC:B3:67:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A83FEBE96669AD77CF3A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fb53971-9675-35ef-967c-cc3ac5a62b51.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     36617
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:3f:eb:e9:66:69:ad:77:cf:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=26e074d6-76bc-4a9a-8c4b-16e504f232de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:ba:72:41:27:07:46:7b:6a:f8:7c:33:39:
                    2e:cc:34:b8:46:10:47:fb:fd:4b:1c:d6:3a:8c:73:
                    10:fa:14:3d:33:10:99:07:df:cc:ff:b2:57:09:a4:
                    83:a1:e6:bb:6f:a2:78:f9:07:b3:aa:76:57:c8:0e:
                    fc:35:cb:d5:1e:45:2a:bc:a5:ab:98:ee:62:0d:b5:
                    ab:13:ac:32:eb:66:be:38:a9:57:52:f6:49:6f:17:
                    97:25:18:bb:a4:e1:3d:f0:7f:f6:86:f5:57:8d:67:
                    d4:c7:c3:78:a2:f7:81:ac:e5:c6:64:5f:d8:a0:e2:
                    f6:1e:b3:74:8d:5d:d8:57:53:d8:03:0d:8f:8a:6a:
                    0d:04:d0:cc:63:79:ac:0d:99:9f:99:fb:2f:6e:54:
                    63:7b:f8:1a:62:10:47:2f:85:7f:23:a2:d9:79:5e:
                    43:e0:92:21:78:5b:4c:71:9e:a2:5f:95:bd:4f:da:
                    8a:1a:82:c1:ca:65:48:f3:21:ca:ab:db:5c:0f:f1:
                    1a:8e:08:9d:ea:6c:24:a8:50:46:1f:f2:40:c1:fe:
                    b6:cf:82:22:45:be:16:b0:7a:56:87:df:c1:b9:d6:
                    ec:42:59:b3:e8:25:75:b2:13:28:19:a6:fe:b9:ed:
                    fc:09:9a:ae:56:ff:2d:69:4a:a8:90:af:4e:25:aa:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:70:7C:32:B4:CD:62:1B:1F:C1:30:9F:C9:8F:A7:D3:BC:B3:67:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fb53971-9675-35ef-967c-cc3ac5a62b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:25:fa:31:00:4e:73:0b:66:c3:32:3a:06:bc:7f:e8:23:09:
         4b:2c:ea:bf:01:61:f6:4b:bc:a3:ba:46:ef:9c:48:0c:91:ed:
         44:68:fb:22:bd:1a:9e:35:0d:69:79:5e:14:98:f3:ad:3d:e1:
         4a:68:a7:4c:e9:99:2b:d5:9c:ae:87:45:95:2c:99:76:e7:9d:
         c0:8a:a8:b9:51:7a:3f:4b:30:15:35:2a:61:1c:a4:3e:ed:3d:
         4d:6c:3c:c9:91:26:b6:db:13:e9:9a:14:8c:61:28:09:da:6a:
         01:88:ae:e8:fb:fc:07:1d:49:f0:b0:e7:74:b1:c6:cb:5f:ee:
         33:ee:1e:1c:a7:95:32:15:bc:c6:5d:41:d5:6c:13:53:49:68:
         b0:4d:92:25:a4:27:59:d7:df:d5:19:e8:26:ef:70:26:ab:fc:
         2d:eb:ca:3e:5c:e9:cd:83:94:fd:99:f0:ad:55:3a:6f:13:ba:
         f2:fd:80:70:ac:c8:38:e1:c4:16:26:16:ef:c9:f0:01:0c:c8:
         c7:ae:cc:a5:5b:1e:82:6b:4f:49:20:d8:c0:40:65:1f:a8:d7:
         c8:2e:83:aa:8d:c2:fa:63:21:3f:b8:34:52:50:de:9f:17:95:
         91:fd:b3:aa:0f:3a:80:77:cb:a5:b5:cd:4a:f1:d0:29:bd:b5:
         1e:96:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:53:42 2026 by rpki-client