Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cded1818-c6a7-343a-ae20-6efe4c16cc1c.roa
File:                     cded1818-c6a7-343a-ae20-6efe4c16cc1c.roa (raw, json)
Hash identifier:          WM7LLMsYy9ioR0LJPvhmeXf1RszevskmMvqOAYTcogQ=
Subject key identifier:   30:75:D6:0C:6B:D2:DE:7D:F5:55:FB:C8:52:93:C6:D4:AF:96:4E:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2ABD32183B9E6AA3ADDE089C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cded1818-c6a7-343a-ae20-6efe4c16cc1c.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     10515
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:32:18:3b:9e:6a:a3:ad:de:08:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=c33f4db5-5e97-4ee7-b801-8e944c28aa02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:70:58:52:49:8e:25:48:8d:71:85:dd:25:
                    d8:ac:97:e6:ef:b2:85:c3:10:6a:f4:96:8e:18:0a:
                    e4:f8:5b:4a:ba:1d:d5:a8:8b:fd:b5:7f:01:a4:d3:
                    e3:18:25:97:dd:95:c1:16:5b:63:d9:58:28:7e:ac:
                    cd:ae:b0:d9:68:12:83:8d:c7:4a:af:c5:34:10:fc:
                    51:6d:61:e5:35:58:1f:56:dc:93:94:ac:90:53:3e:
                    c4:a5:2e:aa:ac:2b:6a:e7:f0:02:e7:6d:de:9b:ed:
                    de:56:c5:76:fc:41:49:82:3c:8a:52:33:b7:54:08:
                    d7:16:0c:30:11:e1:ab:19:fd:0c:fd:6c:34:24:df:
                    23:08:fa:42:8a:6d:c7:83:7c:da:da:47:b7:c0:14:
                    28:7d:54:13:3d:6d:12:e7:e6:f6:b0:37:b4:5d:4f:
                    1d:5a:08:ae:db:30:b0:9f:6d:59:4b:70:84:93:87:
                    25:10:70:9a:24:ff:6e:1e:4f:0f:c6:64:46:0a:b7:
                    99:43:d1:1f:d2:ce:0f:6b:c4:8f:e6:58:cb:b2:13:
                    cb:72:54:6b:b7:36:ab:b5:cc:03:0f:63:8e:a3:54:
                    a9:83:99:09:48:15:3a:56:ae:e0:44:76:01:39:5f:
                    f0:78:a3:54:bc:90:c1:5c:df:2f:d6:af:5e:83:b4:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:75:D6:0C:6B:D2:DE:7D:F5:55:FB:C8:52:93:C6:D4:AF:96:4E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cded1818-c6a7-343a-ae20-6efe4c16cc1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:dc:89:39:0c:ed:9a:b2:4f:48:c8:db:14:cf:87:e9:56:be:
         b1:1d:7a:90:64:b6:61:f6:55:3e:5d:78:20:dd:06:22:8e:41:
         15:3d:71:58:a3:d6:ad:76:57:de:21:1a:c9:a3:90:98:e7:d7:
         bf:ec:3a:79:04:b2:ea:6a:a8:a2:b3:f2:2f:09:1c:d7:1c:0c:
         5e:e8:3a:41:71:f7:b0:84:ed:c1:88:cb:e0:ba:31:7b:13:15:
         d8:04:3c:11:f1:44:04:79:b8:b9:42:80:0e:1b:2a:c4:1c:49:
         56:86:0e:04:d6:4b:6e:0a:3b:23:1a:d0:aa:37:60:0f:7b:c0:
         17:0c:2b:26:af:e6:d8:5c:89:1e:d4:25:8e:1d:a4:90:76:5e:
         cb:3a:5f:89:e5:9c:32:af:77:02:96:6d:92:a1:b6:17:1c:65:
         dc:5b:0c:2b:f6:9c:c5:06:b5:07:cf:e4:83:25:45:de:15:41:
         41:22:90:0f:4b:b9:cd:fa:81:ab:d4:6e:93:3e:36:97:af:46:
         07:97:db:48:19:a4:b7:bf:99:43:84:ec:65:08:c2:77:fe:94:
         e3:ea:72:8e:70:e6:57:36:b2:13:44:1a:6d:99:e0:45:b7:49:
         f9:2e:91:ff:5c:fd:fb:90:54:25:8c:83:a0:07:a0:28:89:df:
         20:f4:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:33:14 2026 by rpki-client