Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d44563ae-3abb-333f-90e9-7c29ca386c98.roa
File:                     d44563ae-3abb-333f-90e9-7c29ca386c98.roa (raw, json)
Hash identifier:          DeSbPjt3fqyiIVYfxSe9UlYmS58a6RVNcL7cutIfxx4=
Subject key identifier:   BB:DF:3C:7B:86:83:EA:DE:95:7F:0F:FB:98:E5:97:F1:41:AC:32:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4987F8F35295CF1FA8F1E320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d44563ae-3abb-333f-90e9-7c29ca386c98.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397193
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:f8:f3:52:95:cf:1f:a8:f1:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4574187e-b3c1-4b34-ad2e-2e6e94e9414d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:54:73:c8:71:e2:44:a9:f6:f9:04:d0:d8:
                    ba:f1:8e:23:7a:0b:e9:a4:ec:99:af:a6:85:ba:a9:
                    f9:c9:06:c3:a4:6c:3c:82:84:f2:7d:12:f8:24:d8:
                    4b:76:14:f4:fb:93:39:fc:1d:73:89:ca:ac:93:bd:
                    38:c1:49:b4:e3:f9:dc:c9:21:6c:47:45:7b:91:e4:
                    98:96:87:11:21:b6:00:0c:c8:67:4e:f7:26:6c:7d:
                    b3:bd:d2:13:b9:5c:7d:15:a6:6b:b5:d7:54:0f:5a:
                    77:57:e9:fe:62:cc:da:bc:7c:b0:9e:11:f4:8d:98:
                    84:78:28:c4:98:cc:ca:f2:6c:ba:25:82:9a:6c:06:
                    a8:8b:8a:8a:03:f1:9f:ba:cd:35:31:d1:f9:e4:10:
                    08:07:12:ec:1b:9c:8a:fe:01:24:0a:cb:0b:fd:38:
                    b5:f4:bc:4b:ac:be:40:d7:5a:71:40:a8:05:f3:5e:
                    f1:58:1d:75:56:22:f5:0c:6c:9c:dc:f6:28:c9:a2:
                    fb:a3:dc:c8:67:dc:8a:e1:bd:ba:ec:87:af:91:81:
                    3f:0e:2d:6e:fa:51:7c:b2:1a:59:32:ea:a3:d6:91:
                    cf:27:d1:8d:2f:6c:85:5c:24:4e:6b:d8:eb:3a:d0:
                    ea:fe:7f:2a:ea:44:02:f0:10:99:52:b1:c1:1d:af:
                    2f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:3C:7B:86:83:EA:DE:95:7F:0F:FB:98:E5:97:F1:41:AC:32:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d44563ae-3abb-333f-90e9-7c29ca386c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:fa:f6:77:9f:42:7a:72:35:a3:2f:2a:66:9c:5d:f2:ee:
         20:eb:21:3c:fa:42:46:63:1e:37:5d:a1:f2:10:2e:76:60:5a:
         19:a3:64:28:b3:b0:a5:52:b9:bd:3f:80:72:d5:93:5e:52:ab:
         6e:41:50:93:7e:64:93:9c:ea:1d:9f:7d:66:3d:ec:42:a3:ae:
         99:e1:d6:99:df:3d:29:24:4e:ad:73:94:25:1b:d0:eb:45:49:
         58:18:37:02:9e:cb:a6:74:57:b1:ab:b5:18:e8:78:55:f8:ea:
         9b:a5:3a:0f:b7:49:54:e7:a4:fd:bc:81:ec:5e:62:86:04:e5:
         e2:32:90:7e:ba:c8:c6:cb:6e:f4:4f:06:cb:be:a1:f2:7f:ae:
         51:d4:a9:38:32:18:39:12:63:9d:80:3b:bf:9c:dc:7e:51:6e:
         a9:a3:64:0b:16:4b:9b:ca:3f:6c:45:3d:e6:76:3e:77:7d:38:
         3c:eb:b3:51:e4:24:79:7e:1d:5c:6c:a0:3d:fd:17:ae:e6:a5:
         8e:60:70:9e:b4:fc:fa:49:37:ff:8c:45:9d:3e:c7:90:eb:70:
         7e:f4:34:da:77:29:fd:cc:65:fe:ba:41:00:ad:8a:3d:60:5f:
         f8:03:8a:b3:92:1d:c6:10:93:38:d5:a7:69:cc:20:dd:49:b9:
         0c:93:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:03:53 2026 by rpki-client