Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6e27a49-769a-3025-9ad4-4c9292689374.roa
File:                     d6e27a49-769a-3025-9ad4-4c9292689374.roa (raw, json)
Hash identifier:          6H9f5eAWotFb72ipE8F6uRf37a3rXSByqUqCI4hL9PM=
Subject key identifier:   E6:35:DF:D3:44:6B:DF:6E:C6:72:09:15:B1:89:9F:D9:CA:B1:4F:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986BB643F89E08651D4D600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6e27a49-769a-3025-9ad4-4c9292689374.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396578
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:bb:64:3f:89:e0:86:51:d4:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6bf64002-eb17-44ae-90a4-e73b96bf0bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:80:43:c6:fa:9b:ad:e5:f5:af:fa:27:c7:
                    42:e0:19:3c:48:f7:ef:ea:5b:1a:f5:76:eb:1d:7c:
                    85:58:34:1d:18:88:90:30:cc:5c:3f:63:45:4d:77:
                    82:ee:69:fa:e1:65:5d:f8:c5:a6:ee:64:d5:b8:c1:
                    40:c1:0b:04:55:f2:c8:7e:35:50:6e:72:0d:0a:2b:
                    ed:5c:b0:97:21:fe:7b:62:b4:27:f1:45:43:db:62:
                    48:48:92:69:ab:9b:07:24:5b:55:e4:85:c5:69:47:
                    29:2c:ad:d7:7b:c7:14:85:ad:50:aa:b1:b5:16:5d:
                    07:50:7e:dc:bb:5c:2c:af:eb:a2:6b:5d:25:10:df:
                    3b:7f:67:10:85:f8:f8:d3:8f:31:b0:be:7b:10:5d:
                    67:7b:b3:96:6e:d5:b1:ce:e6:be:7c:cc:0c:0a:62:
                    57:dd:89:84:49:02:13:66:dc:43:3e:fc:3f:fb:42:
                    a5:86:3b:2d:06:c3:03:7f:37:44:49:e1:ed:f8:b9:
                    30:53:0d:e4:40:b1:bc:fd:b8:2c:68:f1:2f:d0:50:
                    21:48:a3:35:a2:24:c8:62:dc:e5:d8:8e:6d:8f:24:
                    3f:c9:c5:f5:57:fc:d0:fd:98:32:c0:e6:14:82:3c:
                    83:65:01:f6:20:e5:ee:e1:fb:75:d6:b1:01:e4:81:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:35:DF:D3:44:6B:DF:6E:C6:72:09:15:B1:89:9F:D9:CA:B1:4F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6e27a49-769a-3025-9ad4-4c9292689374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:ce:e5:11:8f:a1:2f:b4:b0:3c:ea:d2:c5:1c:be:b7:f7:
         8c:6e:13:32:da:35:52:76:d8:d7:3a:97:96:25:43:ed:29:2f:
         7b:fc:a0:b9:74:db:e5:7d:60:91:3c:c0:2b:d1:fd:4a:68:59:
         82:5f:2a:42:09:f8:1f:47:41:0f:df:d7:1a:a5:98:93:e7:2e:
         18:3b:43:5a:e9:58:bb:a3:c0:98:08:60:f4:aa:69:71:0a:05:
         f3:4f:72:dc:15:b4:9a:f7:f5:5d:2a:0f:6d:ab:fc:c2:f8:b7:
         5b:62:25:c9:f5:cd:2e:b6:57:60:30:52:f9:0e:09:2f:45:2d:
         c7:d3:63:85:2b:d6:29:51:aa:79:f6:77:5f:1f:10:fa:81:60:
         37:23:c5:bc:72:20:da:c9:0b:86:8a:58:5c:f7:0e:35:12:aa:
         a3:06:e6:6a:ef:51:07:16:2b:ad:d1:d4:37:53:ad:ba:98:3d:
         c4:91:cb:96:3e:05:93:1d:53:79:ef:19:71:33:0a:ce:ec:16:
         0a:7d:1d:21:90:21:36:1b:31:76:79:e3:6d:dc:ec:ca:3b:ea:
         61:75:67:37:08:80:74:55:36:8d:ab:b5:d0:72:e5:1b:96:24:
         94:45:0d:76:aa:ea:d8:c9:aa:df:1b:34:0a:28:8e:46:6a:ff:
         cb:09:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:17:53 2026 by rpki-client