Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece80d86-3186-3f49-b786-dd3f1cca4a7f.roa
File:                     ece80d86-3186-3f49-b786-dd3f1cca4a7f.roa (raw, json)
Hash identifier:          fOfKK7U8UOzMZ8LnHhohjaZ5OGVfERqHQw+tNeCitjI=
Subject key identifier:   F7:41:82:40:C5:95:01:B3:18:48:6E:69:77:E6:0B:D9:3E:1F:BD:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7939A74B3D260B24A464500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece80d86-3186-3f49-b786-dd3f1cca4a7f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397207
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:9a:74:b3:d2:60:b2:4a:46:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3e234663-cd1c-4c72-85d7-86e2d6e01d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:74:0b:52:b6:f9:b5:d0:23:b9:bb:b9:fc:
                    e6:b2:26:17:26:ef:7f:76:23:5f:95:13:a5:3c:54:
                    45:ca:da:bb:d2:50:55:5e:f1:bc:1f:17:2a:1c:a6:
                    91:5e:54:de:6c:99:f5:ea:f9:0d:fe:dc:1a:5b:09:
                    ac:f3:58:4d:13:d5:9b:fa:02:7d:bd:41:db:86:f4:
                    2c:6d:23:04:2f:f7:33:59:f2:b4:0b:52:00:83:aa:
                    88:31:15:36:07:f5:a5:a7:b2:d5:a3:64:21:da:c1:
                    cc:eb:7b:2b:4c:30:a4:7b:c0:b4:64:e7:a5:4c:ae:
                    16:93:27:ee:14:3a:65:d9:47:bc:4f:97:69:c9:be:
                    fb:b6:99:1e:46:55:cb:b0:0e:12:ab:ee:26:d3:64:
                    48:5a:e0:ae:43:d5:a0:b0:b6:ba:f5:4d:b6:42:c0:
                    92:b8:bc:66:66:f1:4f:53:3c:39:1c:d8:c1:81:83:
                    ca:cd:a0:b2:60:78:8c:1a:79:46:95:25:6b:8d:c8:
                    73:c3:b5:76:f7:5c:98:86:88:f8:18:50:66:a7:3e:
                    97:65:09:06:56:4f:8b:29:a1:b6:c0:61:3d:8b:a6:
                    2c:75:fe:03:b5:5a:b3:f6:d0:a1:f6:50:b2:6f:d2:
                    55:4e:6b:7a:1e:48:8a:cb:c0:d7:d2:b5:34:1a:e4:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:41:82:40:C5:95:01:B3:18:48:6E:69:77:E6:0B:D9:3E:1F:BD:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece80d86-3186-3f49-b786-dd3f1cca4a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:db:da:42:b0:c2:89:b9:99:02:0e:00:e2:cf:3c:2b:87:
         d1:77:c7:af:18:f0:f0:4a:1a:4a:82:e8:ac:24:20:78:86:0e:
         7c:42:c4:df:a7:37:d9:f0:aa:20:65:16:26:8a:e2:eb:ba:3e:
         71:3e:55:12:3d:e7:dd:92:12:70:fe:79:e4:c6:bc:27:d0:1b:
         d2:ae:b4:40:49:41:f1:56:ae:5e:d8:fa:9d:8c:90:9a:20:13:
         19:6e:29:aa:87:ac:9c:37:41:2e:6f:1e:cc:7b:b3:76:d0:11:
         65:1e:22:ef:32:3c:51:91:d1:9b:d0:48:94:f3:97:e0:e2:91:
         05:67:15:84:88:71:84:05:65:ca:d6:fe:76:4f:fd:8a:5a:d6:
         2f:f9:2e:99:6c:c8:88:15:96:7e:39:bc:dd:71:cd:93:96:cd:
         af:9d:bb:ed:bb:7d:df:bc:ad:e4:72:c4:a5:a4:7d:f8:3d:dc:
         3b:02:6c:1f:ab:c2:ff:69:0d:8d:43:54:d7:f1:f1:9f:81:9f:
         e1:9c:73:87:70:e4:24:aa:66:df:57:35:dc:85:f4:f1:f2:92:
         95:a1:1d:7e:f8:a5:8c:68:fc:02:8e:5a:1a:c6:e7:c5:d3:68:
         15:88:0c:66:3f:95:14:3e:a5:dd:44:59:0f:1a:73:f7:d1:c2:
         05:cf:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:08:25 2026 by rpki-client