Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed6eab5a-7448-3974-bc32-aca877970d65.roa
File:                     ed6eab5a-7448-3974-bc32-aca877970d65.roa (raw, json)
Hash identifier:          rmwdwHB1rh8yATiLgk5xS7z8nsALDZqA5D0y6cq1A7Y=
Subject key identifier:   6E:8E:A0:89:A0:EC:F6:03:40:6E:41:E1:48:A2:9C:C0:36:5E:30:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497335AC34D57EDFD3514780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed6eab5a-7448-3974-bc32-aca877970d65.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396617
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:35:ac:34:d5:7e:df:d3:51:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=00e95b9b-7cff-4b01-9bf0-d006e8886a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:36:39:9d:fd:bf:f3:fe:ae:ea:8e:5f:3a:
                    12:39:95:a3:80:62:f2:10:de:f4:d0:95:6d:0c:ea:
                    05:cf:58:c3:ff:20:e0:d9:ec:48:93:46:94:e0:17:
                    c4:4d:90:4f:90:bd:11:35:f1:a6:ba:4c:77:b1:60:
                    c6:b4:1d:31:3a:8c:ea:ce:2c:14:68:82:5e:c9:d9:
                    f7:58:da:3b:d9:c1:6d:95:03:b7:92:7a:1b:b9:19:
                    8c:05:fa:d3:6c:9a:cb:47:75:29:64:b0:4a:30:e7:
                    33:62:bd:d9:e3:53:93:36:50:2f:ca:53:f3:da:e6:
                    b6:6e:2a:75:c9:75:80:6c:2f:6e:ed:d8:e8:06:f1:
                    7c:14:c8:e5:d2:ef:4f:48:59:42:8e:5d:18:62:ec:
                    29:55:ed:ab:98:1f:d1:20:c8:ad:58:8d:0f:df:18:
                    ce:6f:59:3b:54:9e:a2:af:1c:de:1e:cc:3e:f4:8a:
                    d4:6f:5e:25:c1:c4:8d:7a:3f:84:5f:af:c2:91:54:
                    d0:63:eb:3f:66:27:58:79:54:66:b4:60:4e:5c:11:
                    56:9b:73:72:f4:b2:28:56:d4:55:4b:2a:90:5c:87:
                    e2:8d:62:4c:c5:1c:77:96:23:9d:24:b6:53:36:03:
                    68:26:d5:af:85:24:48:ea:2a:9a:22:42:ec:e6:4b:
                    8c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:A0:89:A0:EC:F6:03:40:6E:41:E1:48:A2:9C:C0:36:5E:30:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed6eab5a-7448-3974-bc32-aca877970d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:33:4d:1b:e0:0c:f2:92:fd:38:34:aa:72:1d:72:8a:28:ea:
         fb:47:fd:e2:57:8e:5a:cc:44:58:4b:de:ad:a1:d4:5a:e2:6a:
         e4:9c:e0:7e:de:27:8d:e4:13:f7:0a:42:74:11:e4:12:ad:ca:
         86:39:77:24:f0:3e:d3:64:b8:9f:89:fc:c5:49:af:f8:a0:01:
         c1:20:27:87:7f:02:f9:0b:be:92:e8:7c:3c:9b:39:d4:f1:81:
         9f:00:26:bc:10:30:9a:36:99:55:95:b6:40:cb:c1:78:95:fd:
         87:a7:ef:b4:4a:1f:d0:6e:08:a4:fa:50:ac:20:29:5e:40:76:
         b0:b2:39:a9:9b:2e:11:c4:11:3e:5c:47:d4:5e:f9:60:33:ee:
         57:24:24:14:bb:5a:7b:ea:4f:c9:6a:11:24:8e:29:5f:cc:f5:
         f2:3e:dd:3e:29:fd:eb:e7:c6:c3:82:96:f9:85:09:ee:f7:34:
         b6:9e:83:50:ed:ca:e4:05:d9:59:88:6e:1e:fe:2b:3f:26:f3:
         59:13:e9:33:3d:7c:f1:d5:02:8c:32:40:b0:ff:58:d8:38:55:
         bd:50:24:2e:30:87:56:d4:10:c8:f5:ec:79:4c:d4:fd:44:bb:
         bb:64:00:1d:09:34:65:bf:01:87:22:85:77:5a:1e:54:41:01:
         4f:1d:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:11:38 2026 by rpki-client