Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471d55c0-6ef6-3882-be8e-74eed738156b.roa
File:                     471d55c0-6ef6-3882-be8e-74eed738156b.roa (raw, json)
Hash identifier:          7n3NNgKPbBFw1rKpjZJjRV0p1CJa26gDvPCqY2fpRbk=
Subject key identifier:   A4:74:7B:E1:E0:F2:3C:3F:67:B4:B7:DD:B6:FD:73:92:D3:7F:EF:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974EB52ED6F20FC05E59BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471d55c0-6ef6-3882-be8e-74eed738156b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36627
IP address blocks:        2001:503:d414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:eb:52:ed:6f:20:fc:05:e5:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7b41ec35-5934-40a5-8ddc-07ca380e1abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2b:ae:ae:d8:31:64:3a:57:8f:52:b2:50:64:
                    7c:fc:74:3d:1f:71:12:2e:47:5e:0d:2b:d0:85:35:
                    85:8c:19:e2:e3:fa:4f:9c:22:eb:15:5e:6d:ab:a2:
                    58:1f:bf:b6:11:c2:09:7a:97:09:d7:14:96:5c:a4:
                    a3:ba:aa:dc:f3:8e:51:1c:dc:e0:41:73:70:ac:29:
                    2b:79:4c:01:c5:da:46:bc:50:68:c3:1e:40:3d:17:
                    6e:bd:24:51:80:74:d5:63:c0:bf:f3:4d:ad:04:21:
                    96:fe:8a:b9:7a:ba:dd:f5:6c:b4:35:be:14:aa:51:
                    2c:b2:40:2d:91:df:bf:88:fe:19:93:e7:61:2c:80:
                    98:6d:10:a0:98:3b:cf:57:a8:70:fc:ab:8d:6f:55:
                    70:42:21:16:a8:ec:da:0a:48:ef:f3:b9:a6:a7:82:
                    7f:03:c4:fe:0b:6f:06:7d:bf:9f:36:3f:f9:72:0f:
                    9d:c2:a3:7e:c9:cc:16:5a:23:57:15:0b:c6:dd:73:
                    9b:99:72:70:c7:b4:11:d1:be:01:2d:cd:3e:97:05:
                    5c:22:be:57:74:6a:7b:38:b7:69:e9:ab:53:fb:2f:
                    f3:c6:8d:59:8d:fb:87:83:20:bf:5e:b1:2d:49:27:
                    d9:41:5b:75:c0:9b:42:dc:c9:03:6e:a3:94:c6:f7:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:7B:E1:E0:F2:3C:3F:67:B4:B7:DD:B6:FD:73:92:D3:7F:EF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471d55c0-6ef6-3882-be8e-74eed738156b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:7f:83:83:b7:a9:68:ca:99:0f:86:fa:5c:bd:ad:27:45:58:
         45:a1:93:68:74:79:7e:9d:6d:8f:e9:7f:f9:67:06:42:98:2b:
         c8:e9:e8:33:35:ea:88:49:a6:30:5a:d8:5c:7e:10:52:71:59:
         0c:b8:86:70:e1:b6:72:12:fd:36:4c:9a:53:26:f3:d3:9d:79:
         cd:87:77:1b:22:e1:2d:e8:06:9b:e8:a6:e5:c6:8a:3d:7e:16:
         0d:3a:a7:42:cd:a5:b4:1f:0e:a3:ab:3d:5b:c2:1b:69:9e:a0:
         d3:21:f9:46:24:94:1f:a3:64:0e:0f:e5:f1:40:e0:cb:99:fb:
         30:75:73:14:1d:a0:5c:a5:0e:f1:08:16:64:ad:b5:f2:86:8b:
         35:79:70:e4:76:53:3a:bc:6e:47:76:30:70:51:a5:63:20:80:
         5a:0c:db:88:e8:3c:e2:02:aa:c4:db:71:d7:11:7e:84:0a:5c:
         e5:b2:df:10:86:79:c1:c7:ac:c0:f3:e7:0d:ea:5b:d6:92:64:
         b7:3a:dd:75:b8:2e:f5:50:eb:76:ec:ab:11:bf:82:3d:3a:d0:
         0f:5c:aa:78:cc:b3:5f:e1:ef:1b:7b:86:a5:88:77:34:da:64:
         d3:61:07:c0:cf:c0:0d:1c:b4:71:b3:41:97:5c:e2:0b:e0:e2:
         d6:6b:04:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:06:17 2026 by rpki-client