Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5942590-7748-33ef-8cb9-0635cec7f6bd.roa
File:                     b5942590-7748-33ef-8cb9-0635cec7f6bd.roa (raw, json)
Hash identifier:          eYp3oFdbWZddaEVw7ecRc81xHaFgnbMz9Kyjgn+0ngk=
Subject key identifier:   7E:F8:23:83:6F:A7:D6:94:22:67:B2:56:46:67:9F:C6:82:28:A6:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7A3A20C0DC57FBFCC0800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5942590-7748-33ef-8cb9-0635cec7f6bd.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     397196
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a3:a2:0c:0d:c5:7f:bf:cc:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=25bca1da-824b-4c72-8e26-63a1371d446f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:7a:70:d8:25:25:53:a1:a5:63:28:3c:24:
                    66:3e:da:51:12:95:16:13:84:61:f1:15:4f:3b:c7:
                    42:dd:ef:9a:19:25:14:71:93:bf:43:79:43:cf:ae:
                    be:86:23:9d:d3:e1:05:62:4f:12:14:cc:88:c1:4a:
                    52:15:29:69:64:9e:b7:7f:88:1d:86:a3:b2:61:4b:
                    a4:6d:61:03:1b:87:64:a6:b0:ab:9b:9a:08:b3:89:
                    b8:a9:91:b8:b1:92:d4:33:21:28:11:d2:51:8f:bd:
                    af:3c:ec:e5:a3:4b:c0:10:ef:09:e3:d4:6e:c5:48:
                    46:d0:b8:32:d6:71:c0:e2:aa:5f:ff:6f:c9:04:84:
                    80:13:c1:83:33:14:14:66:dc:4c:71:67:e0:4a:e2:
                    b2:d1:6f:c7:ba:08:b7:21:99:ab:ea:1e:1d:03:17:
                    1e:e8:0c:99:14:5d:b1:bd:01:48:85:63:17:f2:0e:
                    d4:e5:25:8f:a0:83:5c:5d:f2:e4:95:c2:a6:1f:d5:
                    ff:0a:ff:c2:58:d4:32:bf:b3:2a:0f:1e:31:27:77:
                    e8:99:d9:e2:dd:06:68:1e:88:80:d5:20:69:e0:88:
                    b1:6c:71:bf:f8:69:71:f8:39:b9:80:5f:a0:a0:db:
                    cc:bf:d5:f1:5c:ce:c5:b4:04:d8:28:37:3f:58:78:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:23:83:6F:A7:D6:94:22:67:B2:56:46:67:9F:C6:82:28:A6:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5942590-7748-33ef-8cb9-0635cec7f6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:11:ea:f8:fd:e1:82:87:6a:3f:e9:cf:fd:e1:58:a6:66:
         b0:c5:2b:d7:d2:32:f5:43:c9:e1:c0:62:8a:d5:eb:1a:d2:d3:
         29:5b:78:0c:43:33:8d:6c:26:12:4d:b7:1c:8d:63:c3:a4:e0:
         db:76:70:4d:fd:8d:39:ab:6f:65:88:05:4e:7d:d7:09:89:98:
         85:83:c4:44:4b:af:68:a0:e2:40:91:93:62:8d:39:24:9b:85:
         63:66:41:0b:24:7e:b0:9d:4b:84:27:6d:2f:bd:b8:ed:f2:54:
         4e:c4:eb:ce:0f:75:4e:f0:a5:69:fa:20:1e:8e:f2:5d:3e:67:
         10:ae:52:68:04:63:13:70:ca:a2:34:85:09:ef:9c:2d:60:a0:
         6f:ad:7f:ef:3d:2e:ef:5c:f6:4f:08:67:f9:64:e5:b8:5f:f1:
         6f:27:6f:08:cf:d0:bd:49:99:ca:a9:c9:56:59:de:7b:41:24:
         8f:18:5a:6a:d8:43:f0:b3:ba:65:b9:a5:76:bf:3a:a4:99:d4:
         65:6b:8e:67:88:b4:5d:e7:bd:ba:73:55:8d:22:31:d2:fb:5d:
         3b:12:60:a7:de:ea:82:d0:a4:ea:29:79:be:15:e1:db:b1:cb:
         9a:e3:d2:fe:de:c9:2d:d2:44:e9:61:a5:46:60:59:f3:23:4a:
         b1:2a:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:05:18 2026 by rpki-client