Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83ecbb0a-05fc-368a-8301-d793e9649fe3.roa
File:                     83ecbb0a-05fc-368a-8301-d793e9649fe3.roa (raw, json)
Hash identifier:          dsRrpJLyQ8vpsV67QC1fkow/BtDAr3no3RT/A439f4o=
Subject key identifier:   25:B4:F1:36:60:03:19:92:CD:9A:29:17:28:E7:4F:56:C9:C3:65:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7988971874E31C93B8F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83ecbb0a-05fc-368a-8301-d793e9649fe3.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     20362
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:98:89:71:87:4e:31:c9:3b:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=44f0e240-8ffd-4093-8407-75d208f8d9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:5e:6c:09:ca:96:f8:78:13:b0:99:5b:70:
                    25:2b:9c:ef:11:27:3d:35:a8:f3:02:23:fd:0a:50:
                    70:c6:7a:45:59:a7:3b:c8:bd:50:d2:a2:86:71:26:
                    b3:a5:1e:f3:9c:f2:40:0e:7b:89:e1:cd:a6:1e:37:
                    68:44:2d:58:eb:b3:d7:08:08:0f:64:aa:8d:25:5d:
                    d9:37:b3:6c:e4:c9:bc:67:3d:16:93:91:3e:95:10:
                    eb:3f:eb:6e:d7:95:36:3d:66:6d:b8:e4:ad:c9:ba:
                    d5:48:30:61:07:45:ba:e2:e7:f5:4e:61:c9:0d:2f:
                    3b:d0:f8:9c:af:87:f0:5a:12:3b:a0:18:38:b7:b4:
                    3e:fc:d7:36:fa:0a:6c:ab:31:ea:3c:dd:07:39:5a:
                    e9:aa:90:7b:0f:de:7f:57:59:5e:6a:fc:8d:c2:ad:
                    e8:b0:a9:c6:7c:a9:81:6c:87:20:23:b3:ad:5d:ab:
                    6f:1e:16:40:bf:3f:55:f2:5c:c4:e7:9e:37:4b:df:
                    b0:17:6d:0b:95:f9:f2:55:bc:06:56:af:ad:bb:9c:
                    fa:b9:ad:21:55:47:d9:3e:4b:17:8e:59:3d:4a:da:
                    a6:8e:20:42:8d:4c:50:c7:b5:6f:64:d8:95:7c:d3:
                    bc:2c:25:5b:14:0b:6a:4e:ed:3a:e8:f5:de:2a:93:
                    ad:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B4:F1:36:60:03:19:92:CD:9A:29:17:28:E7:4F:56:C9:C3:65:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83ecbb0a-05fc-368a-8301-d793e9649fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:df:c4:0a:63:c2:e2:58:20:f1:44:07:51:84:63:62:43:
         6d:58:28:9c:14:d7:88:54:c2:d6:01:13:0b:eb:5e:a2:c7:6c:
         0b:2e:55:a9:cf:e1:25:37:2a:a9:38:54:94:9a:f1:a0:d1:79:
         cc:64:75:30:6b:12:c9:af:d8:f5:b5:8e:a5:8c:0e:38:fd:c3:
         e5:ad:24:b3:5f:8b:2a:c3:a7:3e:63:df:12:e0:85:e4:90:c1:
         82:78:88:6d:e0:ac:da:e3:e0:ab:88:79:81:c6:8c:87:5b:66:
         90:48:14:66:cd:59:7f:fa:a3:9f:20:e4:9d:6c:29:2e:8f:aa:
         34:53:fe:26:94:73:ec:23:85:a6:77:28:d3:bc:cd:e7:ee:2f:
         fd:39:20:71:73:1b:7b:10:3f:85:7e:ea:95:36:f8:1e:70:87:
         a7:8e:fc:89:37:57:aa:45:87:29:b3:58:ed:98:6f:c0:69:6b:
         73:0d:66:14:56:ef:34:c9:10:bf:53:71:0b:31:10:f6:97:d4:
         85:4b:02:c0:59:28:3b:d1:e5:ce:b3:04:01:d1:03:c5:16:b3:
         52:b0:05:17:b1:29:55:8d:33:2d:00:7d:bb:e6:08:11:c6:c0:
         b1:c2:85:67:7b:a6:d1:c3:ea:e0:d2:00:2b:23:42:9d:84:ca:
         c1:79:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:30:43 2026 by rpki-client