Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0a3bd69-4e1b-336c-bc2d-66daf91d7e4c.roa
File:                     b0a3bd69-4e1b-336c-bc2d-66daf91d7e4c.roa (raw, json)
Hash identifier:          x+F7T/ghZF7SwCqrnZXw1p465MkknLJCOYJ7aSEyjKA=
Subject key identifier:   74:71:27:D2:B4:67:A6:87:EC:6B:C3:3D:07:D1:BD:D8:F9:1B:E1:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F19FCEE542BEA7447D6C2EC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0a3bd69-4e1b-336c-bc2d-66daf91d7e4c.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     396603
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:ee:54:2b:ea:74:47:d6:c2:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=c5638262-bc0c-4fae-a40a-f8c4e09769bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:66:4c:4e:2b:43:50:4f:a3:b7:1b:91:59:
                    4b:f0:3d:b1:73:08:51:15:26:ba:bd:4e:2f:27:e4:
                    d1:4b:94:8a:18:df:4d:48:61:93:d9:17:64:f2:61:
                    af:26:cc:f7:c4:f2:7f:88:ea:21:e4:b8:b3:ff:c9:
                    87:3d:c0:c2:f1:c7:ae:5a:20:e8:57:49:ad:69:0c:
                    fe:81:f8:81:b6:09:86:ee:ec:6a:db:9d:6e:d4:87:
                    8f:ea:90:85:8a:73:11:04:3d:8e:ec:5f:f2:dd:a3:
                    a2:1b:87:60:a6:48:9e:22:a6:b6:a0:36:f3:4f:cf:
                    ec:bc:87:9f:72:d9:2b:ed:7e:dc:23:cf:c8:c3:a1:
                    fb:cc:1b:1d:ae:44:72:69:9e:24:82:4a:0d:02:2a:
                    c4:92:94:8b:a4:26:fd:fe:b6:3e:82:1d:d4:ec:15:
                    68:17:1a:81:58:6b:09:ec:77:50:26:77:5e:64:61:
                    f6:c4:f7:cb:e4:23:31:2d:68:a1:e0:4f:4a:46:a6:
                    b8:2e:b9:33:63:e8:75:aa:7e:2f:85:9f:9a:ae:99:
                    8e:0f:46:ba:9d:54:a6:ff:a7:65:76:40:08:dd:91:
                    50:36:9c:48:22:a0:05:33:d9:e4:ff:c4:35:75:b4:
                    22:44:a2:70:38:0e:e4:51:5b:a3:90:f6:80:b9:3f:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:71:27:D2:B4:67:A6:87:EC:6B:C3:3D:07:D1:BD:D8:F9:1B:E1:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0a3bd69-4e1b-336c-bc2d-66daf91d7e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:db:f5:cd:ca:3d:de:21:ea:e5:ac:2e:73:f6:1c:92:27:8f:
         22:b8:03:b8:b8:fe:85:aa:d9:eb:a2:90:81:8d:5c:cd:44:27:
         ce:cd:9c:9e:94:a2:3c:ac:72:11:fc:fc:99:d0:f6:71:fb:ad:
         a6:00:39:07:53:2f:ed:a6:8e:4b:ad:66:94:64:56:89:e2:85:
         a7:1a:c2:0d:f7:62:c0:1b:04:82:bb:91:6a:6a:8f:8c:4b:1e:
         5a:96:e4:17:35:0c:c5:83:d3:d3:f4:aa:ef:3e:3a:54:a8:92:
         41:f6:43:2a:7f:24:c0:da:c4:34:50:e4:22:f3:ed:5f:4f:5a:
         ca:d5:66:7d:a0:8c:6c:9d:5b:f0:97:26:ec:2d:8b:f2:e1:4f:
         01:19:d5:d1:44:94:20:60:20:bb:42:f9:0d:57:0b:2d:84:57:
         0d:d0:3f:10:22:4a:fc:fa:f7:f4:5b:d6:17:7c:9d:29:61:c7:
         3f:ee:06:51:79:a9:b2:8f:62:93:c4:3d:1b:bb:90:3d:fa:90:
         90:08:f8:6b:69:38:b5:fa:5a:5a:18:3a:38:7f:40:34:da:94:
         8b:d2:54:e4:f5:29:b5:90:bf:e0:65:da:70:53:d6:c5:49:d7:
         42:a0:67:1f:78:74:cf:d7:9c:8a:96:d1:72:1f:8c:b5:d5:50:
         e3:b1:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:22:04 2026 by rpki-client