Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22eeaa3a-2407-3880-9947-94d32cdf5047.roa
File:                     22eeaa3a-2407-3880-9947-94d32cdf5047.roa (raw, json)
Hash identifier:          26UlRe7l1IV8FkABKxOgO9U9sfwHa13kRQrVyCDh2gk=
Subject key identifier:   C7:A3:EB:0F:45:D8:53:B6:56:47:5F:D9:8D:11:D5:D0:DB:01:B7:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986BFB2D6BD69A65E279620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22eeaa3a-2407-3880-9947-94d32cdf5047.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20431
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:bf:b2:d6:bd:69:a6:5e:27:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=103ee0a3-228d-4860-8644-2ad59ea4e770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:e0:fc:57:d2:48:3c:76:97:88:c6:ff:b7:
                    ae:46:28:38:4a:9b:bb:f6:44:6d:34:54:7f:43:b2:
                    0e:d4:e6:50:e9:c2:c1:db:3c:92:e2:52:af:8a:9e:
                    ef:b2:7c:1b:e6:09:a6:dc:ca:a4:7f:58:b6:f5:09:
                    a2:e4:77:4e:2a:3e:84:fa:2b:84:b4:76:ca:e7:dd:
                    2f:c7:87:ae:39:13:be:24:78:76:1a:e2:93:59:ba:
                    1d:4e:cf:1d:5d:32:fb:32:d4:2a:15:5f:a1:6d:c9:
                    88:8a:39:3d:80:9a:15:39:13:54:fc:60:54:23:05:
                    60:91:e4:be:51:fe:78:12:66:79:b1:db:2d:10:c7:
                    df:2f:0b:b5:f8:fe:08:ee:75:82:62:de:c7:c0:bb:
                    e7:b5:8a:e0:88:a7:3c:77:1c:fd:47:e6:b9:64:b4:
                    51:7b:dc:e0:73:ca:e0:70:23:0e:3e:fb:0b:1f:2e:
                    f6:58:60:00:98:c4:43:37:ff:e5:a3:b7:e0:99:ab:
                    8c:5d:7a:4b:d8:81:73:75:e5:86:2f:45:bd:25:0f:
                    97:e9:b7:5f:18:77:70:17:e8:6b:c7:61:bd:a4:c9:
                    3f:2b:d3:e8:c0:b8:27:ce:a8:8a:62:d0:8b:2f:9f:
                    c8:97:9f:4a:d1:8c:d8:9f:a8:29:8f:cf:15:c0:df:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A3:EB:0F:45:D8:53:B6:56:47:5F:D9:8D:11:D5:D0:DB:01:B7:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22eeaa3a-2407-3880-9947-94d32cdf5047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:45:ba:9d:33:c5:82:28:c5:45:9d:7c:af:7c:90:18:ba:50:
         f8:9a:df:bc:a1:93:ac:51:28:3e:30:b1:69:42:d1:ae:ca:64:
         2d:16:33:04:5b:88:94:ec:ce:9a:2e:ff:c5:37:8a:18:98:6c:
         17:e8:eb:77:01:e4:71:92:5a:db:f5:ce:8d:67:06:60:14:4e:
         94:ac:0a:46:2e:c3:a9:46:98:53:7d:60:50:84:e4:bb:df:0b:
         88:1c:0a:d4:a5:1e:78:e0:e7:2f:cd:3b:0a:af:53:08:7e:24:
         10:13:e4:bc:06:40:f7:b7:c5:d8:3f:d5:9c:be:d7:82:c1:ea:
         b8:ce:9e:55:1b:7b:40:79:d2:0a:23:5b:33:da:34:5d:e0:c4:
         20:67:08:58:2d:e1:b7:9b:1f:ac:47:4f:f5:b8:e8:04:7a:c0:
         48:09:15:9a:c4:a4:be:49:12:a1:09:4a:e7:18:c7:5d:18:5a:
         ea:e0:c6:02:0b:68:24:e0:7a:39:4f:c0:8e:b1:85:ec:f4:bd:
         91:9b:0b:7b:f0:2e:2a:49:cb:db:44:d2:09:b5:2c:f7:45:13:
         ed:97:9b:b9:6d:4c:c7:9e:c4:f0:f0:c8:96:ee:c5:d9:39:c6:
         57:1e:db:85:96:97:e8:ca:4f:13:62:8c:c2:a1:20:51:91:20:
         a4:87:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:54:31 2026 by rpki-client