Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa
File:                     b3230797-9752-3a16-a896-808d3a6c520b.roa (raw, json)
Hash identifier:          d8cfIoLh2aWEW/eXXdkVOx+A+h6hcXB646POb6tHAXs=
Subject key identifier:   9F:0A:50:3B:2F:79:11:5A:90:28:35:93:FF:88:D8:3F:34:44:F1:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F19FCFC4C70F26B94E0CC8000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     20362
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:fc:4c:70:f2:6b:94:e0:cc:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=834f1fb8-9764-4dde-92d5-dab87595addc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:a7:7e:bf:ab:36:33:75:aa:b6:e3:a0:6d:
                    6c:6d:5d:9c:dd:7d:03:a3:c8:65:15:12:44:8e:fb:
                    c1:ec:ae:fb:39:a7:f3:c8:83:8b:65:7c:13:24:ee:
                    5c:19:eb:c0:7b:90:7a:08:e8:14:12:d5:42:91:83:
                    65:92:ef:9e:b0:1f:7e:42:c3:6c:b1:1f:94:ec:c0:
                    3c:ba:b3:8f:b1:c7:28:a4:e5:53:d9:7a:08:fe:9f:
                    58:8e:23:a7:d0:f7:c1:3c:b5:5d:83:08:7b:6d:9b:
                    e6:be:e3:92:e0:e3:fc:67:fe:a1:0f:79:e0:1c:55:
                    c6:74:53:27:d2:54:94:fa:d1:4e:83:a3:cc:f1:ca:
                    ae:97:da:ea:fb:6c:32:4a:1e:44:7a:28:6a:a6:40:
                    34:9e:a2:e0:8c:a9:05:a1:f1:e5:84:fe:9b:f3:1f:
                    e3:0f:1d:65:fa:12:18:ed:70:2c:79:b9:56:ba:f7:
                    06:00:9b:af:ea:04:81:d0:20:9b:b1:cc:ca:f6:e6:
                    0a:4e:10:b6:24:a8:69:0b:d8:11:58:c9:b7:08:d5:
                    5e:83:6a:19:7b:c2:eb:06:17:3f:a1:0f:16:c6:d6:
                    7b:29:e8:44:72:c8:ac:65:26:07:b4:d0:22:46:66:
                    f0:05:14:0d:23:de:53:5e:d9:3e:33:98:19:0c:af:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0A:50:3B:2F:79:11:5A:90:28:35:93:FF:88:D8:3F:34:44:F1:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:63:e6:00:e3:46:1f:2c:89:b9:af:63:a4:24:a6:39:df:
         ba:41:6f:09:bd:55:cb:98:52:a9:9a:fc:5f:22:2c:12:0d:60:
         bb:96:b7:58:84:c5:e3:66:81:aa:e4:8e:63:4d:a0:e5:b7:ff:
         ef:f9:40:25:77:d5:a9:e9:b6:39:20:d1:f8:cf:10:2e:ff:b1:
         e9:d0:8b:85:cd:93:e0:be:27:f0:11:21:57:6b:d7:bc:54:63:
         29:0b:6f:2b:4d:d4:1a:58:00:53:a8:28:58:f1:0f:66:12:d7:
         43:df:9a:81:41:33:cd:1e:c0:5b:15:35:b4:8f:53:1b:96:87:
         cd:2b:12:0d:1a:57:77:5a:cf:24:2f:0e:db:d4:97:86:61:e8:
         c1:d6:ff:93:b4:20:13:f0:75:19:39:4a:fa:14:de:b9:0c:3f:
         2e:21:c7:d8:db:45:fe:51:44:ed:d6:5f:8c:35:dd:5f:dc:00:
         6d:55:40:e6:e6:f1:d0:2d:07:7b:57:79:7a:73:9b:44:e1:ba:
         30:b4:a9:c2:cf:d0:54:6a:02:ba:70:bc:09:c9:03:89:a9:51:
         f4:97:c8:c5:a7:24:4c:47:80:10:07:bf:57:b6:cc:14:a8:0c:
         d0:8b:53:0c:41:bb:8f:ab:99:20:7b:96:4e:c8:f6:d3:67:0a:
         35:87:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:54:42 2026 by rpki-client