Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e04a06e-5cb5-3495-9318-169d37e705d3.roa
File:                     7e04a06e-5cb5-3495-9318-169d37e705d3.roa (raw, json)
Hash identifier:          6UF2od/nw/Dwt2A+leyZKiRrClI8twws/multSqE2pc=
Subject key identifier:   64:0B:9C:89:6A:A6:33:D2:8F:BA:E0:B2:E7:8E:88:D1:0F:12:63:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2D87E327C79E7297D2EA6680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e04a06e-5cb5-3495-9318-169d37e705d3.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     396580
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:e3:27:c7:9e:72:97:d2:ea:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=9313aa8d-8c88-40ef-844f-51817f3ce892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:66:5d:3c:60:98:92:ab:01:7a:2a:3c:c9:
                    76:22:ab:c1:46:3a:ff:4c:77:4f:8f:cd:13:2f:b5:
                    aa:35:20:65:75:1e:74:26:cb:9f:bf:e4:34:52:e3:
                    a7:c0:f2:85:15:50:b8:0d:31:c8:dc:1d:23:74:a0:
                    01:8f:fe:0e:c4:5e:3d:c7:49:41:3d:71:e1:6c:95:
                    f5:d0:98:1f:bb:3f:e1:c8:da:00:de:86:d6:9c:ae:
                    ed:50:04:78:7a:c6:e8:ca:47:7e:e4:1e:06:bb:ac:
                    91:7a:c2:52:15:33:55:95:0e:b2:5d:d2:02:e8:3d:
                    e4:1e:00:47:2b:47:c0:86:48:bf:0b:39:98:6f:1c:
                    be:27:ec:39:c5:c2:99:1c:98:27:c9:a3:94:60:34:
                    6b:ba:68:e6:bb:c0:6d:29:c7:82:f5:dc:1e:5e:9c:
                    2c:3e:9c:bb:33:5a:bf:aa:48:43:50:da:f1:60:1f:
                    5c:38:b5:99:bc:81:02:40:25:33:cd:1a:5b:ac:6c:
                    78:72:70:1e:43:c5:82:40:15:4c:08:20:b3:fd:ab:
                    06:3d:59:61:d5:8b:ac:2b:31:81:84:7e:f8:fd:e4:
                    cb:1b:c1:70:48:42:3e:74:6a:74:10:d2:6e:43:cc:
                    81:bf:a8:01:0b:6b:92:56:15:7d:41:48:f2:39:00:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0B:9C:89:6A:A6:33:D2:8F:BA:E0:B2:E7:8E:88:D1:0F:12:63:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e04a06e-5cb5-3495-9318-169d37e705d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e4:78:38:c3:ae:7c:33:a4:e3:15:bf:40:4d:54:0a:b5:6b:
         cb:9a:b6:e7:86:7f:e3:96:9e:7c:4b:b5:62:f8:e7:43:a5:95:
         8b:71:e7:88:41:d2:6c:79:b9:92:2f:09:c9:ef:d8:00:da:67:
         bb:3e:44:48:e9:9c:5e:96:fa:04:1f:73:4a:77:8a:c1:ab:2c:
         69:b2:21:8b:ea:e9:10:9b:3e:7b:3c:13:b1:a5:70:0b:8c:90:
         9f:a4:6a:d3:69:04:d0:06:16:77:a8:01:ce:d4:75:a6:79:e4:
         b9:30:c3:89:99:bc:62:79:43:69:94:92:49:9d:ab:23:a7:65:
         9d:bf:c0:93:56:b0:4a:d3:eb:37:e7:ce:23:32:b2:10:73:ee:
         6b:c1:d5:19:74:ed:d3:01:a9:f0:2e:16:c6:85:fc:a7:24:af:
         d1:40:a6:fb:6c:89:45:e0:46:1c:29:d0:63:5d:15:6d:70:98:
         0e:6b:8d:bb:65:0e:f0:de:3f:9c:b6:4b:2b:5a:39:d7:be:a8:
         8f:b9:7e:23:30:8d:6c:17:e6:13:7d:2a:83:29:54:c2:df:59:
         03:24:40:39:8f:bb:35:b6:fd:15:9d:fb:18:dd:a8:12:70:82:
         0b:ae:32:9b:4f:4f:31:82:73:bd:0c:e7:7b:57:02:a6:55:f5:
         24:2f:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:19:17 2026 by rpki-client