Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
File:                     13ccc359-3db6-3e92-90e6-38596962acd9.roa (raw, json)
Hash identifier:          jBQYfOJIj4Ih1X/iwdPo3Xq4BDbLLd8ul3hJxSBWXh0=
Subject key identifier:   AE:2D:18:EC:ED:CE:A9:BD:9C:D0:B4:3A:A8:41:D6:CF:67:B4:15:92
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584F4973AC7F1BB0251BCBABCF20
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46510
IP address blocks:        2001:504:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ac:7f:1b:b0:25:1b:cb:ab:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e591ddc2-bacb-466f-999c-72ef9f9faf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:28:48:ed:fd:b5:df:8d:e5:c0:60:35:d8:0c:
                    53:7b:3c:6c:37:32:a5:a7:2b:cd:b5:a0:12:9b:41:
                    64:78:de:7a:54:24:2d:1a:62:09:ad:67:ec:72:64:
                    eb:49:b4:b7:89:2a:a9:fd:24:2d:06:7a:c1:a5:0c:
                    b3:3b:a6:6a:80:9c:8b:34:02:e2:5b:7b:ca:46:27:
                    0c:e8:3e:9d:59:b7:dc:12:76:fa:79:c7:1b:06:88:
                    25:72:bd:4f:05:e3:97:93:44:27:13:be:34:a8:d3:
                    b6:8f:93:64:f4:6b:f0:68:fc:2b:da:2f:80:b8:a5:
                    30:9e:47:17:06:2a:ad:4a:78:37:fb:2d:60:e9:38:
                    48:a7:92:7f:bd:65:f6:17:74:f4:33:45:27:43:19:
                    1f:c5:68:22:a7:54:78:03:01:d3:ce:0b:0b:4f:7d:
                    8f:f6:cc:07:e7:21:cc:28:ae:bf:9b:1a:27:65:29:
                    8e:55:69:ac:ae:4f:19:cc:ed:f7:a5:b2:8b:af:86:
                    79:4e:51:b3:72:63:df:be:e2:20:07:62:fd:7f:53:
                    1f:b6:64:2d:e0:c2:f2:dd:1e:e0:68:fc:31:77:61:
                    ab:4f:ea:89:d5:b4:62:99:fc:06:4d:d4:19:71:35:
                    33:a0:b7:f1:c3:f8:11:6e:8b:3a:37:53:1e:84:d0:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2D:18:EC:ED:CE:A9:BD:9C:D0:B4:3A:A8:41:D6:CF:67:B4:15:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:114::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ae:8a:1d:90:00:21:79:0a:91:10:59:75:c9:9b:94:08:c0:
         99:83:a4:47:ab:11:0b:b4:56:34:95:d0:f1:03:a2:5c:ac:c9:
         57:af:c6:26:e2:bc:02:c7:5a:75:82:c1:9f:46:ad:ef:05:e7:
         0d:7b:51:0c:de:cf:28:cc:11:c4:b2:b3:c4:bd:1c:fb:56:88:
         dd:a0:e2:4c:ea:00:9c:44:ab:d2:41:6e:d8:fd:2e:ca:cb:f0:
         be:d7:b5:d4:47:27:40:05:51:d0:c9:c9:97:05:90:99:43:df:
         d4:6f:3e:0e:a3:c4:7c:d9:52:09:f8:34:27:66:22:03:d8:dc:
         f8:36:4c:9a:61:ed:f9:97:a7:b9:fd:0b:bd:bb:30:65:b5:d9:
         b2:3f:5e:8a:4c:96:35:87:d1:18:19:5b:aa:13:cd:2e:ab:6e:
         18:a9:2b:a1:79:20:f6:c6:e3:15:75:a3:04:0f:4f:b9:84:09:
         d3:74:4b:ef:13:10:6d:98:b6:4f:98:03:18:36:6d:62:bf:ef:
         eb:a3:04:66:e0:a5:a7:2b:b0:61:52:8b:70:06:38:d4:57:2d:
         1f:f6:06:72:e1:dd:4a:8a:9d:62:f2:09:f4:82:40:33:c3:b2:
         97:3d:6b:a0:ea:1d:18:0e:08:67:9f:c4:40:ca:b5:ef:8f:12:
         3d:10:38:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:01:47 2026 by rpki-client