Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7eceba67-f5f4-38bf-af20-9d19ab82a701.roa
File:                     7eceba67-f5f4-38bf-af20-9d19ab82a701.roa (raw, json)
Hash identifier:          lAdc6IZaIuE41PvABH1dXSbQAkRDGLcUJyXB/E3a7Hk=
Subject key identifier:   A4:EE:38:0F:3C:D8:E8:2D:57:DD:31:64:A7:1D:77:AE:31:8C:71:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B20ADB60500D74A99D9800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7eceba67-f5f4-38bf-af20-9d19ab82a701.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     397196
IP address blocks:        2001:500:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:0a:db:60:50:0d:74:a9:9d:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=9d2e6f44-9fc3-45e4-9cdc-9be836868e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:e8:6c:23:b3:ca:af:e6:e3:f9:ac:cc:d9:
                    54:26:10:b5:b7:dc:bd:c6:b4:4c:c9:86:a7:02:83:
                    ee:4e:ef:6c:1c:6e:eb:8b:d5:71:e3:fe:2b:a9:d3:
                    d6:46:00:59:25:5a:55:d3:0e:06:a9:95:ac:b1:dc:
                    cc:98:c2:ef:a9:05:29:47:a5:1f:37:a9:2d:31:40:
                    ed:d4:39:86:2b:e4:bf:ca:09:b9:f9:0a:ba:4f:2b:
                    e1:6c:53:c2:08:37:27:d6:a5:e3:04:f5:d4:72:43:
                    1b:e7:98:17:fa:e5:29:64:fb:1e:dc:4e:a9:ee:df:
                    f1:d5:e2:cf:32:14:67:93:23:fc:ab:ee:55:4c:49:
                    74:f5:ab:ce:28:4c:84:14:d3:df:ba:cb:71:de:99:
                    ba:e1:2a:b9:7f:25:ad:55:8c:5d:7d:60:86:7c:a2:
                    f1:08:b3:e1:52:10:36:15:24:0d:86:8b:d9:b5:7c:
                    f2:0a:61:72:d0:0d:ee:bf:4a:11:dd:26:2c:a0:6d:
                    b5:02:19:4a:c5:0b:2a:b2:d2:84:19:e9:b5:59:9c:
                    a8:1b:25:f5:c1:e5:5e:22:c7:59:78:6f:b0:10:b4:
                    f6:06:be:9f:6b:1e:2d:b4:91:89:4e:29:11:cd:5c:
                    b7:eb:f2:61:96:1f:95:a9:ed:19:7b:87:4e:88:fd:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EE:38:0F:3C:D8:E8:2D:57:DD:31:64:A7:1D:77:AE:31:8C:71:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7eceba67-f5f4-38bf-af20-9d19ab82a701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d7:4f:2c:38:d7:46:86:62:fc:b5:16:48:dd:07:a6:7b:bd:
         ff:e4:a3:fa:73:2f:c3:ec:32:88:93:9b:d4:60:b9:12:33:3b:
         9e:22:8e:2e:6d:32:05:e7:d6:47:15:a9:a0:69:4f:7d:44:5c:
         31:58:dd:24:9f:49:90:7e:89:d4:8e:42:98:82:ec:53:ec:d9:
         65:a3:72:5a:9c:a9:7f:8c:f5:7a:8e:d2:67:95:39:a0:67:cf:
         6f:5a:2f:3b:bb:b8:68:2c:d8:62:82:c4:43:56:ec:42:c4:f4:
         66:7f:b2:61:ac:c1:50:bc:40:64:f5:11:36:d9:61:4e:4f:e2:
         9d:a4:4a:cf:ec:8e:8b:81:4a:14:eb:74:d8:87:83:45:b9:73:
         23:4f:2d:f2:93:a0:5c:62:2c:97:7d:80:a8:30:35:fb:7f:14:
         2c:35:40:5c:11:24:34:ed:e3:88:b9:3b:3a:b9:b6:38:51:9a:
         45:ef:2e:a8:ef:df:91:82:a0:7b:02:3c:c2:dc:aa:63:25:0e:
         2b:49:f9:f5:55:04:f6:19:8c:fd:fc:7f:2d:fa:de:72:cc:27:
         4b:f9:5c:34:ff:d6:2b:5d:07:3a:51:ac:3a:c9:d9:bf:d7:7b:
         75:a5:57:4c:d4:cc:3b:97:70:6f:14:ff:f2:ca:64:89:12:0b:
         08:85:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:04:45 2026 by rpki-client