Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2f5c74-ebae-366d-b5c1-bb253f3496e9.roa
File:                     7f2f5c74-ebae-366d-b5c1-bb253f3496e9.roa (raw, json)
Hash identifier:          j5d8Kw/ZcpAMDkEYZr+G5sFMsV8SvV+Js2lNjj9yRlg=
Subject key identifier:   3E:DC:8B:F6:1F:8B:02:74:32:EC:3F:1E:53:6F:AF:83:9A:5E:22:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7A410144FE75E5B4B29B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2f5c74-ebae-366d-b5c1-bb253f3496e9.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396725
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a4:10:14:4f:e7:5e:5b:4b:29:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=292312a9-7b66-45f1-b096-b2ea784b2b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:fe:79:fe:6e:49:71:cd:c0:7a:5e:ff:43:
                    59:0a:d3:0d:fb:de:68:21:59:81:ef:8e:4d:74:ed:
                    b7:47:33:2e:f2:5d:5b:bf:bf:6c:07:58:7c:1f:fa:
                    75:b4:d3:f0:db:2a:49:47:f1:7c:96:f8:d3:9e:75:
                    90:ca:b8:0b:8c:5d:46:fb:11:68:9e:bf:5a:f4:bf:
                    9b:d9:b4:ba:b2:e5:1f:e5:9e:b9:c1:5d:4f:61:36:
                    9a:ba:b3:ea:5d:de:5f:af:81:6b:b5:3f:7f:08:cf:
                    30:10:c7:3c:35:de:97:8c:c5:41:0f:60:99:07:be:
                    d7:bc:f2:1a:fd:2a:7b:3d:7f:dd:a6:d2:1b:67:75:
                    9e:a2:9a:5b:aa:d8:23:74:86:f9:a4:36:a2:87:f3:
                    d8:6a:54:e7:93:b0:48:1f:fc:02:12:ca:f1:de:7a:
                    9f:2e:5f:35:ff:19:01:86:c8:09:c5:b1:c8:5b:15:
                    83:04:ff:fe:af:89:06:9c:0e:83:f9:c1:b7:a0:c7:
                    5a:b0:5d:a3:1a:e6:f2:32:20:90:f3:d5:6e:7c:24:
                    e8:8d:32:25:de:37:c9:8b:96:6c:b7:2a:84:77:43:
                    e5:60:a7:a1:fd:45:37:cf:40:8e:cc:c6:ec:e0:fd:
                    b6:5d:c3:19:a8:3e:01:64:63:03:8a:34:2c:d9:0a:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DC:8B:F6:1F:8B:02:74:32:EC:3F:1E:53:6F:AF:83:9A:5E:22:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2f5c74-ebae-366d-b5c1-bb253f3496e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ae:ee:5b:e4:38:22:3f:ff:4d:db:01:af:4f:4f:36:4c:4e:
         f7:af:78:fd:00:7e:c7:1e:5e:59:f2:40:a3:f5:94:4a:22:44:
         d0:c3:45:36:b4:7a:cd:81:ed:b9:a8:03:3c:fa:47:be:e7:20:
         35:c9:a2:ae:b1:d3:56:3a:51:ee:ac:c5:2f:52:28:da:7e:16:
         af:3d:45:d5:64:d1:ce:3f:05:ce:95:fc:8e:88:66:c9:1e:97:
         17:1e:29:64:fc:35:72:1b:cb:e6:c0:83:ae:0d:b9:29:d8:20:
         d2:8f:fc:b3:ba:45:dd:b5:6e:d7:d7:98:19:85:d4:b5:d9:e5:
         f0:3a:f0:b2:8e:fd:0c:dc:e4:9d:90:88:f7:31:1c:11:51:92:
         c9:46:aa:93:59:8d:17:b9:8e:50:58:f7:ec:b0:b9:a2:20:8a:
         4c:b8:ea:a7:29:f7:b5:3a:82:cc:65:2c:3f:0a:79:46:57:d0:
         25:96:d4:fb:f5:7b:26:e2:57:54:d8:ac:f7:ab:29:6c:54:33:
         90:42:b4:29:f7:4a:66:f1:6f:d4:47:f6:e7:ad:7a:d4:44:d8:
         9c:a2:42:89:c9:61:2b:6a:bd:32:de:d9:00:52:ad:0d:32:fd:
         6a:51:d7:ee:46:84:e4:52:cc:b3:71:28:83:a4:60:29:c2:10:
         37:5c:b8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:41:42 2026 by rpki-client