Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce781880-9ef5-3a43-91b0-a1d38d0fa1ea.roa
File:                     ce781880-9ef5-3a43-91b0-a1d38d0fa1ea.roa (raw, json)
Hash identifier:          Oky8oYruEactEK+g5xPnXzjZryjZR+LHJLIwYY5WyzQ=
Subject key identifier:   EC:BD:D9:C5:B9:C3:FD:04:C8:38:5B:14:E6:D7:A2:59:06:72:7A:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61456DC781C66F33AA226E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce781880-9ef5-3a43-91b0-a1d38d0fa1ea.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     397212
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:6d:c7:81:c6:6f:33:aa:22:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=b3edef6f-ac55-4d7e-a8ed-9b2405df5c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:b0:80:7f:5e:6b:3a:df:18:75:b7:e2:a0:
                    c2:79:9c:0f:8d:40:8b:79:24:b7:40:bd:1c:9c:19:
                    02:01:36:2b:ae:3a:90:94:00:32:2c:1b:4b:a4:b3:
                    f8:aa:ce:a6:33:82:d3:3c:6b:00:2d:51:3f:30:28:
                    9c:14:6a:84:64:41:da:c8:ad:67:c6:af:8b:70:c7:
                    9d:5e:28:fe:f1:0c:3b:d8:7a:ed:6c:27:b2:bd:44:
                    89:b4:74:7f:7c:3e:6c:ec:96:32:50:32:0f:46:df:
                    17:83:55:83:e4:1c:94:54:79:c7:3d:9a:50:80:29:
                    28:5f:2c:42:69:ac:f9:9f:64:59:f3:d7:06:5f:52:
                    db:d4:b6:d4:21:cf:b2:a6:aa:61:49:d0:14:23:f0:
                    7d:33:bb:23:9a:17:a6:6f:2c:41:a0:23:c1:95:a0:
                    8e:44:1c:06:d5:5c:7e:7e:f2:be:f0:63:97:e8:98:
                    cd:d7:b0:c3:76:bd:40:02:61:86:cd:88:94:38:90:
                    23:ed:3f:a3:5b:47:52:18:4a:3a:c6:7a:1a:01:d3:
                    14:fc:b8:c4:74:aa:22:1f:64:29:6d:0c:c0:ff:0c:
                    79:a3:95:31:80:c0:fb:0e:d9:7a:6a:82:e0:d2:52:
                    22:9d:cd:08:0f:30:ce:ec:7d:54:1b:4c:77:4b:7f:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BD:D9:C5:B9:C3:FD:04:C8:38:5B:14:E6:D7:A2:59:06:72:7A:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce781880-9ef5-3a43-91b0-a1d38d0fa1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cc:37:2f:81:3b:4a:40:8c:72:fd:90:77:43:07:c9:9e:5b:
         dd:6f:08:ea:7d:0a:2b:5b:f9:2d:3c:f4:77:bb:20:65:a9:41:
         12:77:33:31:53:2c:43:fa:51:7b:0d:23:4e:d9:17:5e:67:6b:
         e7:ee:37:6f:56:6f:e8:7a:e5:dd:87:04:5d:de:b2:ba:87:56:
         d7:db:da:60:1f:6a:b4:57:30:f0:5b:ad:98:90:bc:98:a9:1d:
         b1:7d:a2:21:c9:77:7c:62:34:04:67:83:f9:4e:07:b8:b6:3a:
         3c:e9:e9:a2:c6:51:19:aa:0b:f4:8b:9a:ca:bb:ef:11:fe:e7:
         af:1a:9c:7a:71:e2:41:c2:f0:f0:9b:0b:b3:41:bd:a6:00:3f:
         4c:16:ff:98:9e:c1:ff:cf:48:e2:31:87:22:5a:1c:32:76:86:
         d6:5e:22:7a:1a:cd:cf:f7:7c:39:41:e8:3e:62:f0:56:b0:58:
         73:a4:1c:22:77:1c:94:1e:36:f0:34:15:0c:e3:2b:80:89:76:
         f6:49:7b:a7:f1:8c:e4:d4:cf:e6:99:9e:06:63:4c:e6:1b:25:
         aa:0b:78:19:c0:be:19:05:fe:d1:7b:88:7b:43:75:07:e4:69:
         8c:71:3e:b7:39:35:cc:08:5a:77:dd:d3:97:f0:32:4b:f4:11:
         b3:6a:d5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:54 2026 by rpki-client