Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc33897-dd79-35c2-a49d-dbba4e375d7f.roa
File:                     4dc33897-dd79-35c2-a49d-dbba4e375d7f.roa (raw, json)
Hash identifier:          71nhsL27oHiTrco6fp2Kh8sleZLOGmaW/6nNfYZqeFA=
Subject key identifier:   67:04:26:2F:4E:7B:38:1B:A8:FD:B3:7F:37:01:42:FA:A9:64:44:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584FA593FCB44674DD5D04363660
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc33897-dd79-35c2-a49d-dbba4e375d7f.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     36616
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:fc:b4:46:74:dd:5d:04:36:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=bc809723-7b5b-4897-8826-526727d43f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:f0:b6:09:d5:b1:87:15:df:59:4e:8d:c6:
                    f3:f1:c5:be:b0:83:6b:bb:de:82:55:ad:8c:68:c6:
                    72:e5:52:70:5d:70:ab:1a:55:ac:ff:65:3a:e1:da:
                    7a:51:9a:a1:99:40:5d:2c:03:7b:06:b4:f6:a6:30:
                    b6:9e:aa:c7:47:ad:5f:06:c9:6b:c4:10:a6:ee:9f:
                    ff:3b:4b:7e:1c:56:ba:e9:ce:e9:2a:63:63:cd:87:
                    bd:63:59:27:25:00:e4:a0:f5:8f:58:e9:a3:d5:0f:
                    e7:e5:bf:ef:50:b5:c1:3e:ce:05:bf:26:d6:2a:88:
                    1e:e3:e4:da:6b:17:93:8d:10:de:9d:02:79:ee:29:
                    eb:af:91:4a:8e:ed:41:87:72:13:78:b7:98:8e:59:
                    ec:31:cd:ae:72:3e:bd:76:2d:80:cb:41:f0:8a:e7:
                    8b:76:92:80:ef:0e:eb:1b:5c:43:35:7c:7d:5a:a6:
                    fc:46:36:92:ff:ec:4e:b1:c5:93:18:e5:87:d6:a7:
                    04:26:45:60:e3:7c:f6:9f:0b:cf:ea:aa:b9:6d:5d:
                    cf:03:62:54:3e:d2:3a:7d:f8:51:98:39:ac:d4:dc:
                    b0:aa:49:fe:99:aa:c9:27:57:74:4d:30:02:8a:de:
                    c3:5e:1b:43:28:79:ce:dd:6c:f4:20:6a:2d:0a:af:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:04:26:2F:4E:7B:38:1B:A8:FD:B3:7F:37:01:42:FA:A9:64:44:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc33897-dd79-35c2-a49d-dbba4e375d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:92:e7:8e:88:18:a9:28:3f:72:9b:df:90:94:5e:a7:d0:
         24:6a:2b:be:49:4b:8d:18:ee:88:b1:37:5f:c7:a6:ca:6f:67:
         a2:93:39:1d:8e:ef:af:a0:6d:54:b6:12:65:9d:40:e1:0e:68:
         7b:70:76:c5:b0:ec:c3:0b:40:9a:8d:b8:ac:1a:a0:73:f9:99:
         12:98:7a:ce:2c:a2:4d:91:aa:1e:38:d8:45:5b:d3:d8:00:bf:
         16:a1:73:41:3c:0f:d9:c4:b5:af:26:a0:85:7e:14:9a:d1:16:
         fc:20:32:06:d2:67:64:a7:eb:3a:b6:62:d8:79:4f:e6:e0:54:
         e4:a9:ba:07:44:95:b1:1e:a3:37:55:2a:5b:c5:dc:86:a1:71:
         14:10:07:24:99:ad:13:82:0d:b4:8e:df:87:b9:93:73:ee:e9:
         26:a2:25:4d:61:9b:f8:76:e0:5e:18:a1:a6:be:0c:7d:87:d1:
         9c:ad:38:50:1f:92:ec:6c:6d:93:09:ce:ec:85:a3:36:b4:d5:
         8f:f5:be:46:23:90:84:bc:14:50:cc:e7:d3:c2:e9:db:fd:bf:
         b0:55:49:b5:20:e7:9e:e1:a4:d9:89:7b:d2:9b:18:cf:e7:96:
         65:76:06:d7:89:3c:2d:cb:76:0f:36:42:76:ac:13:c8:2f:e1:
         2e:a5:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:24:01 2026 by rpki-client