Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a919faee-8eb2-31c1-b0b6-6ab8c52179d5.roa
File:                     a919faee-8eb2-31c1-b0b6-6ab8c52179d5.roa (raw, json)
Hash identifier:          S99I+mHajRY9Oy4FkEI7KgCPUK/VkB/iEmPIXC5S9d0=
Subject key identifier:   9E:2A:3D:2B:61:F1:94:53:76:F3:F5:DC:5F:5F:8F:DB:3C:0B:79:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2ABD30F27219E92818BF4080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a919faee-8eb2-31c1-b0b6-6ab8c52179d5.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     396582
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:30:f2:72:19:e9:28:18:bf:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=7e53b385-db95-4ba8-a60a-829cdc7ee83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:dc:40:98:d4:dc:38:b4:b8:f3:5d:28:a5:
                    cd:3a:e6:b4:27:e6:eb:d4:68:ca:05:5c:83:fc:e9:
                    fc:6a:d1:9f:71:56:88:29:64:84:04:5d:12:55:e3:
                    58:33:46:be:bd:6b:13:f7:ab:1f:4d:1b:19:15:c1:
                    95:f5:98:fd:e2:77:b5:46:ce:c2:f7:08:f0:f8:d6:
                    41:d7:6a:55:c9:24:ff:96:cc:ce:88:28:e8:c5:97:
                    5b:f3:08:cb:97:41:87:ff:8a:9d:8d:94:f7:91:cc:
                    d9:c3:cd:c1:2e:12:9a:b2:1b:e0:44:6a:45:29:ae:
                    82:7c:18:c7:ba:be:82:b7:b0:d1:b4:7e:a8:1b:7d:
                    7a:ad:2a:50:d1:e7:af:4d:2b:d8:93:51:ae:9f:31:
                    8d:6b:9d:a0:9d:6b:73:53:11:af:2d:8a:bd:38:cd:
                    ac:f9:98:93:a1:d8:40:ad:61:c5:ec:59:ed:4c:b7:
                    cb:64:e0:db:6a:7b:80:a5:61:24:92:af:76:69:88:
                    87:56:a4:ef:d1:de:74:0d:9e:fc:cd:08:51:35:f8:
                    19:78:7b:6c:cf:54:c6:2e:3e:e9:93:5f:90:1d:48:
                    9f:94:25:55:b9:91:be:0d:08:f8:a5:ca:a1:12:f0:
                    f3:82:38:4b:b2:95:dd:30:d3:47:92:a2:22:d7:64:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:3D:2B:61:F1:94:53:76:F3:F5:DC:5F:5F:8F:DB:3C:0B:79:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a919faee-8eb2-31c1-b0b6-6ab8c52179d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8a:d3:b3:50:2a:38:67:3c:2a:e0:2c:e0:53:27:18:20:33:
         a8:07:4c:c7:2a:dc:19:d9:0c:b3:e8:b4:45:ce:23:00:96:bb:
         76:47:7e:5e:bb:61:60:f8:15:53:b7:79:50:a2:c0:73:32:93:
         3c:2e:3b:64:d8:86:f3:1b:c4:d4:d2:aa:d7:ed:7a:d2:c0:f1:
         25:5b:df:fb:28:16:32:06:09:e3:36:fc:50:ea:c6:7e:26:08:
         15:2e:84:0d:db:e1:b4:f8:e5:ea:a3:d7:ae:65:f2:b6:db:2f:
         cd:3c:af:fa:94:2d:e5:18:77:67:33:86:b7:5c:7f:92:0b:ea:
         0d:e5:eb:59:a1:6a:cb:e6:d9:fe:ea:4a:47:12:38:1e:6c:b2:
         17:8c:d2:38:d0:bc:90:53:8b:e7:0a:79:e3:3b:dd:ca:3c:56:
         8f:43:ce:ed:7e:27:7e:a3:a1:30:9b:29:d0:45:be:01:5d:e3:
         c2:5d:88:5f:c6:3a:8f:9f:32:1c:7b:38:df:56:ca:8f:df:95:
         cd:8e:6e:98:e8:7f:7a:4d:e9:57:15:a2:cb:39:be:31:d9:90:
         34:40:93:9f:9f:0f:87:e0:01:17:b0:e8:fe:f2:bb:97:4f:06:
         a7:de:a8:06:67:51:56:c2:02:fa:16:7d:7b:a7:bf:97:31:e7:
         9b:b1:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:26:48 2026 by rpki-client