Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/640d6979-0ed4-3c47-85c2-51422061e3e8.roa
File:                     640d6979-0ed4-3c47-85c2-51422061e3e8.roa (raw, json)
Hash identifier:          R8SLz06kVpwdKcae1F73Ap8KiU2a3xY3+65Aulp1w3c=
Subject key identifier:   C0:6C:87:0B:D3:5A:E3:7D:AB:A5:F1:25:A5:E9:58:76:7F:BC:9C:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49736E12009BEC54B5FBA300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/640d6979-0ed4-3c47-85c2-51422061e3e8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:6e:12:00:9b:ec:54:b5:fb:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=47f88d6d-5873-44d3-a47d-60fb55bd2636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:8a:5a:ff:a2:3c:e9:1c:89:01:0d:e0:c7:
                    78:97:2a:1f:47:45:83:77:a2:9a:f5:67:61:0f:74:
                    c7:6b:a2:36:29:16:15:ef:ce:34:e7:0c:4d:d4:9a:
                    21:c5:39:ef:35:cb:c7:d6:a0:4f:c2:e0:5a:46:b3:
                    70:db:2f:53:3d:cc:48:82:2e:4a:15:6e:96:2a:90:
                    ba:49:1d:a8:41:98:08:92:26:2b:d1:d7:4a:98:99:
                    0b:8f:de:27:6f:f9:a1:e7:50:d6:fe:5e:69:25:93:
                    c7:fb:bc:c8:34:78:89:a9:4d:98:0d:cf:99:cd:48:
                    22:4e:ee:14:7c:f0:2e:05:5c:24:bd:dc:1f:61:1d:
                    bc:0d:cd:36:9b:e8:2b:3e:0f:fd:b1:61:ec:ed:fe:
                    45:02:24:2c:e0:69:a2:8d:ff:9a:ae:50:9a:1a:7f:
                    c9:1d:a7:c0:5d:d6:db:bb:aa:65:d5:97:ca:7d:82:
                    12:2b:8c:bc:57:dc:a2:cc:85:37:38:55:89:87:39:
                    f2:ac:a4:72:93:0e:93:92:b7:6c:7c:9f:71:6f:ea:
                    dd:17:db:cb:03:74:5a:66:5c:a8:00:09:3b:82:d1:
                    57:a6:d2:e4:e9:a2:f2:6b:87:0e:0c:e8:b6:00:74:
                    b2:ba:9e:7a:3c:c6:6a:5a:1d:30:29:34:a7:48:c2:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6C:87:0B:D3:5A:E3:7D:AB:A5:F1:25:A5:E9:58:76:7F:BC:9C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/640d6979-0ed4-3c47-85c2-51422061e3e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:ce:7e:ac:2d:7f:9b:88:c8:d0:db:4b:d9:3d:22:f6:9b:
         9f:d2:a5:a9:ff:80:28:04:f7:c3:4e:eb:ff:2a:b9:d3:7a:5a:
         7f:dc:28:c8:94:88:d8:9f:78:f8:88:c4:3a:74:e9:f2:64:18:
         26:ed:1a:7e:c1:6b:00:1e:63:b5:1c:50:5d:bf:1e:a8:52:4d:
         3e:f7:b2:ca:de:bd:c5:22:16:4d:f7:38:36:e0:93:f9:b3:03:
         2d:b4:6c:2b:b5:ec:b9:e3:b4:c5:59:15:53:cd:22:08:42:d4:
         33:7f:73:16:46:57:70:bb:64:e7:e5:6c:1c:bf:f2:4c:5e:44:
         16:88:4c:64:04:5a:08:fe:3d:ea:41:22:39:7a:55:31:f5:58:
         23:df:e5:5f:ac:55:b3:9e:c2:93:d1:a6:00:16:a3:12:32:85:
         bd:a7:c4:e2:71:86:c6:cc:54:43:f8:f4:90:09:ef:4b:c4:03:
         7d:39:f2:cd:de:b5:5d:97:cd:cc:1c:a5:8a:d3:47:b0:18:73:
         76:94:8e:55:71:22:db:e7:b4:f3:3d:1c:15:99:c7:e4:eb:1e:
         a2:9b:5f:b7:70:20:a6:23:96:87:f5:b9:0e:c5:70:74:4f:b7:
         2d:19:bf:42:ca:21:c7:20:09:ae:79:b8:dc:66:27:3d:a6:14:
         8e:05:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:58:01 2026 by rpki-client