Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ec63fe5-ff8f-303d-9b16-d67bc962fdd6.roa
File:                     9ec63fe5-ff8f-303d-9b16-d67bc962fdd6.roa (raw, json)
Hash identifier:          Aw5z6oHsRkzYLIIVNSaW81JIne/hWEiOTWYoOJyVE/c=
Subject key identifier:   4C:4C:43:0D:9F:58:B1:F6:A4:98:49:FF:82:7A:2F:AA:C6:39:45:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF18226677C8D713CA8907F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ec63fe5-ff8f-303d-9b16-d67bc962fdd6.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     36625
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:26:67:7c:8d:71:3c:a8:90:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=836c548f-b33f-4e24-a4f6-e1a454f07343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:2c:bc:9d:32:64:91:af:78:f3:ee:36:90:
                    b4:61:5f:4d:f4:52:44:78:30:b0:29:34:23:9b:fb:
                    c1:07:76:f4:77:75:23:54:0a:d5:87:19:4b:d2:b5:
                    42:4c:63:f1:a9:13:24:e3:2d:3f:5a:d4:9e:21:e1:
                    4a:62:36:61:fd:4e:ab:6c:17:c7:29:fd:f9:44:58:
                    46:41:a2:01:29:c6:68:1e:44:3f:8b:02:d9:32:40:
                    36:cf:53:79:6f:06:af:72:73:f4:87:ff:cf:ee:55:
                    b9:85:98:c9:b1:fb:84:00:c4:4e:99:94:7f:14:04:
                    88:a5:2e:8e:f8:7a:5a:f3:28:94:47:d6:12:dd:3e:
                    8a:c7:b3:72:9f:d4:79:d8:17:cc:a0:30:9d:30:66:
                    95:14:c5:49:d2:dd:b1:b0:c3:79:79:90:2b:aa:6e:
                    bf:da:50:10:67:bf:9a:ee:38:1a:cc:21:6e:bb:7f:
                    1b:07:48:89:9e:f1:c5:64:ad:65:1d:4b:95:fa:c7:
                    fd:e5:e2:90:02:2c:d9:90:35:7d:35:66:ad:e1:3c:
                    8a:2f:af:7a:59:f0:79:30:d8:48:31:09:0b:61:99:
                    42:a4:8c:ac:c4:da:d1:8c:d1:9e:a0:ac:9a:6c:e9:
                    87:04:78:e2:53:45:2f:5d:47:8a:a9:7b:0e:72:cf:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:43:0D:9F:58:B1:F6:A4:98:49:FF:82:7A:2F:AA:C6:39:45:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ec63fe5-ff8f-303d-9b16-d67bc962fdd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:d9:3d:1a:3c:12:0b:f0:0b:00:a2:d7:33:cc:f3:c0:ce:12:
         ea:2b:85:a4:bb:52:ed:bb:c5:1a:3f:e5:af:14:34:c6:ce:74:
         93:9f:20:e1:f6:21:65:0f:b3:8b:04:e7:52:bb:66:99:ec:16:
         e0:eb:f7:ed:2e:d6:6f:e1:e2:24:40:d8:13:c6:04:f3:ad:e4:
         de:23:63:b2:f9:6c:a5:3c:74:90:ff:c8:fb:93:f3:da:f8:0f:
         30:fe:86:b0:43:c8:8e:d3:7b:9f:34:41:92:6b:0b:6a:93:fc:
         3c:af:65:08:33:90:b9:cf:5f:39:c8:6c:41:4b:f1:27:cc:eb:
         c5:cb:85:b5:35:71:80:0a:88:76:9c:1a:02:6e:41:bf:64:27:
         90:12:71:49:2e:ec:a1:6b:8b:a6:c4:7a:3f:62:97:87:9a:41:
         9a:1e:8e:fc:5e:08:2b:a3:9b:0f:86:31:ba:3d:ac:6c:51:d1:
         54:9a:12:1d:6b:1a:5a:6e:ff:b5:9f:2f:85:6d:46:64:2f:0c:
         82:a1:d9:9b:b0:10:33:ee:fb:cb:dc:e4:25:7e:b8:f3:6d:29:
         96:f5:96:23:a8:4c:06:d3:dd:83:ba:27:e5:ac:39:f2:6a:ca:
         41:29:3e:04:58:63:a7:d4:40:3e:8a:ab:a3:97:2e:0c:ee:87:
         45:ce:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:51:55 2026 by rpki-client