Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa
File:                     d7a1ef72-c7a6-3596-ad41-57b127359de1.roa (raw, json)
Hash identifier:          7cosxY1/s6UXpRg+Cag2clkG5EbZeOulIzETVIzQRAg=
Subject key identifier:   5C:C9:B9:D1:B1:02:6A:9B:02:C0:8B:65:80:5E:74:3A:AB:A7:02:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF18214BE62BAC2949CCDA780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     396555
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:14:be:62:ba:c2:94:9c:cd:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=7297aaf0-a796-4fff-8e9d-6a55d279f9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:16:2a:dc:86:0a:57:24:5e:16:e0:d6:0b:
                    84:d5:17:78:3e:42:6a:9d:a0:9b:1a:7d:5e:8e:7c:
                    72:8c:9b:b6:63:93:45:81:29:78:3d:3c:05:ec:50:
                    a0:67:d5:58:41:a5:73:58:d6:c7:95:29:85:c1:34:
                    95:ec:13:26:8c:78:13:2a:f3:17:51:fb:84:97:8e:
                    0e:6e:70:af:1c:44:3c:e3:55:d5:06:5d:57:96:39:
                    97:ff:9c:e1:81:99:af:51:50:d2:e0:ea:37:00:60:
                    6d:78:31:1e:80:e6:bb:87:96:d7:11:81:b1:ae:9b:
                    e0:4e:19:75:11:c0:1f:0b:64:e9:d6:16:c1:4e:bd:
                    6d:9a:9c:c0:db:95:82:3a:16:6b:18:09:9c:a2:ea:
                    30:53:f2:85:fb:42:e4:cd:f7:d4:9d:8c:5d:fd:0a:
                    e6:19:f7:a3:81:0b:35:fc:b7:aa:bc:30:15:44:26:
                    3e:76:28:62:71:a4:1d:a5:f3:34:53:1f:5a:10:df:
                    6a:19:51:d8:06:07:18:df:1e:94:a1:56:b9:58:1c:
                    ac:23:7b:6b:31:fb:30:59:90:e2:9b:e3:10:b0:32:
                    b1:63:9c:28:24:2c:dd:a4:40:0a:1a:4a:39:77:9a:
                    da:cd:21:11:86:74:9f:24:09:e8:4a:c5:1c:f4:12:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C9:B9:D1:B1:02:6A:9B:02:C0:8B:65:80:5E:74:3A:AB:A7:02:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:29:e2:1c:cf:19:5a:37:03:d3:93:e1:26:30:c7:bd:d8:f6:
         01:8c:d9:86:b9:f9:d7:29:19:86:8f:a7:48:fa:87:f2:fd:56:
         51:f5:97:2a:e2:b5:81:d7:53:fa:40:b4:4d:d6:f9:eb:ac:59:
         a2:2f:cc:e1:8f:4d:85:85:14:97:b9:97:a2:18:4f:04:c6:2c:
         cc:84:dd:60:a6:2f:ff:07:1e:97:ca:74:56:0a:1f:a8:2b:cf:
         61:8e:18:16:5a:cc:57:0c:c9:f6:28:4a:7b:bd:73:fe:75:ef:
         f4:ec:89:0e:d8:37:c3:c1:a1:0f:7f:9a:f1:23:28:37:65:59:
         db:51:16:be:cc:35:58:c6:00:d5:3d:f2:e1:60:01:c1:d2:d4:
         52:f3:fc:79:70:48:b8:5f:38:e0:e4:a1:9d:34:69:10:a7:78:
         95:ed:99:79:fe:43:df:2e:8d:28:7a:21:35:31:a5:45:9e:93:
         9b:17:ed:34:c1:8c:b1:1b:0b:17:81:b4:21:a9:52:c5:84:c3:
         47:78:4a:42:f6:24:2f:2e:6f:55:3b:04:68:58:a2:9f:27:a4:
         e0:17:61:7f:61:48:d0:d1:cb:58:4e:0f:8a:5e:37:14:4e:8a:
         87:65:56:c9:39:fa:02:f8:7b:bb:2d:9e:aa:2e:18:6e:ea:2a:
         b7:5c:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:14:14 2026 by rpki-client