Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/822ce888-b96a-3d98-9dd8-382be46f7494.roa
File:                     822ce888-b96a-3d98-9dd8-382be46f7494.roa (raw, json)
Hash identifier:          l/ZxjhMSwa4ozV3w+//JfLrgfEHBhr5MyCg7yQrG+Gs=
Subject key identifier:   7C:74:56:BC:C8:A0:F2:8A:C3:C8:79:A4:BD:65:7D:07:40:5E:62:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F11A160309C154A6FE619F080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/822ce888-b96a-3d98-9dd8-382be46f7494.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     396600
IP address blocks:        2001:502:8cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:60:30:9c:15:4a:6f:e6:19:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5f0dc845-a7c5-4f3c-95b5-e14aa52464e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:d1:b1:7c:2c:f6:08:d3:a5:67:c7:94:ef:
                    55:fc:ff:e9:43:4b:2d:8a:2a:f3:0a:61:2b:53:d7:
                    21:bf:39:c0:d9:a5:47:46:6d:a2:33:a5:58:75:e3:
                    de:5d:c5:75:3e:27:70:f9:1a:d7:60:4d:91:fb:a4:
                    2d:1c:7e:e5:1e:68:d7:ed:ab:e2:9d:60:d0:35:5b:
                    d6:a7:59:34:ae:06:e9:d8:9b:ab:0a:87:7c:73:44:
                    b7:c1:9b:e6:cc:d3:d3:ec:d8:47:c3:6d:c7:9d:97:
                    ae:fd:29:53:96:fb:50:07:71:c5:0b:72:7c:08:30:
                    29:44:a5:ad:0d:ff:20:57:05:e2:64:a8:1d:c4:2f:
                    87:60:56:be:ba:6f:85:81:e8:10:c3:32:17:41:ef:
                    02:82:fd:90:eb:4f:8b:e9:8f:cb:a9:87:3f:16:df:
                    46:06:9d:68:99:6b:3f:b7:13:2b:3c:a0:cf:78:b9:
                    6a:b7:82:49:95:d2:04:2e:57:a6:3a:39:5d:08:c9:
                    de:1a:2f:a6:95:89:68:61:32:59:d6:36:c5:ba:28:
                    af:0a:93:36:4b:70:0b:fe:90:fc:93:e4:57:dd:f5:
                    e1:f4:50:48:b4:57:c5:17:94:1e:c3:87:4e:18:41:
                    19:05:88:b5:aa:be:5f:6a:7c:01:9e:dc:04:e0:69:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:74:56:BC:C8:A0:F2:8A:C3:C8:79:A4:BD:65:7D:07:40:5E:62:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/822ce888-b96a-3d98-9dd8-382be46f7494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:e0:20:47:1c:46:33:14:53:e5:ad:12:5f:52:d3:10:d1:
         7b:8e:fa:96:eb:b0:47:c3:30:7e:30:6f:f5:66:4f:f5:be:77:
         03:12:d3:65:d0:93:f4:fa:5a:7e:8d:d6:b4:78:7b:93:be:7b:
         cb:75:a0:97:df:f4:bb:cf:f4:55:17:b0:13:a3:1e:38:c2:6c:
         55:46:18:1a:95:e8:03:3f:4d:82:97:39:4f:11:10:c4:9e:31:
         dd:96:ce:85:9d:ff:21:f6:78:f8:66:e5:05:08:ea:15:7a:53:
         af:75:3f:18:fe:1c:96:26:09:93:81:fd:c0:c1:88:cb:31:20:
         22:58:f8:d1:84:82:db:92:08:3e:66:da:ec:9d:8c:00:e3:29:
         10:f2:37:56:fb:e8:a7:d7:f6:d4:d9:b9:c0:71:1d:27:58:57:
         cd:95:b8:70:8c:25:e9:c1:96:68:fd:57:36:b1:2b:81:93:74:
         fd:b2:c0:e2:b2:2f:05:cd:68:a1:1c:d3:12:c6:ea:59:f8:ae:
         b0:d4:d4:76:b6:1a:35:37:2b:24:16:cd:77:ee:b5:98:04:cb:
         6e:bd:5b:07:c8:0d:f2:82:e5:1d:1c:e8:68:af:70:79:2c:0b:
         15:6f:d6:7a:86:72:a2:93:e8:a8:27:2f:ac:4d:ee:23:2f:d7:
         80:a6:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:23:40 2026 by rpki-client