Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e893f5-db20-367d-aec2-3ba55872cfa4.roa
File:                     d4e893f5-db20-367d-aec2-3ba55872cfa4.roa (raw, json)
Hash identifier:          IsA8UWgD2O/22pInEd5rYRbWVlLMtLlKOPoUEfesRe0=
Subject key identifier:   96:69:60:30:B0:5B:B6:92:41:9D:8E:F3:4B:03:9E:F7:43:CF:46:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F92085CF7C3CE50AA63A0B280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e893f5-db20-367d-aec2-3ba55872cfa4.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     19836
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:5c:f7:c3:ce:50:aa:63:a0:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=b4472528-a30b-4f0b-bedd-b479b69dc0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:11:e8:e5:be:e1:c2:09:98:aa:21:3f:cd:
                    da:de:5f:24:8e:20:9c:6c:f1:cd:53:c8:b7:77:75:
                    49:bb:f6:f6:be:9a:e6:f9:4b:0e:4a:16:fb:1d:65:
                    90:c5:91:8c:da:bb:e7:af:ef:c2:0a:fd:40:03:0e:
                    5c:39:e9:5e:b7:24:97:28:b2:3e:6f:90:ac:60:4b:
                    65:ce:d5:8f:61:88:c2:f9:60:1b:50:63:96:ab:c1:
                    ef:bf:b5:29:2f:f3:a7:83:20:75:eb:4f:42:35:3b:
                    22:ec:1f:b2:13:0c:ce:c9:16:ef:ab:c2:0d:70:29:
                    c8:5a:08:95:25:82:ac:91:89:7e:7b:f8:1f:e1:51:
                    66:4c:d3:9e:f3:a9:9b:11:39:69:e9:e4:56:b2:72:
                    9a:19:56:fe:df:f2:39:e5:4d:fa:93:3f:64:f0:ac:
                    85:e5:3d:28:97:76:4f:da:0d:a1:8b:72:d2:0b:7b:
                    33:62:7b:c2:d5:04:c3:7a:90:68:44:b4:2f:ad:74:
                    14:12:b4:51:b2:27:af:00:c7:8f:e5:5b:dc:d1:d6:
                    47:81:87:0d:dd:2a:2f:ff:63:2d:50:c7:0e:47:79:
                    fd:3b:92:f7:da:0d:c1:15:28:46:66:ed:38:c3:10:
                    67:e3:e2:9b:7f:3b:18:4a:4e:1b:aa:64:b4:03:9a:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:69:60:30:B0:5B:B6:92:41:9D:8E:F3:4B:03:9E:F7:43:CF:46:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e893f5-db20-367d-aec2-3ba55872cfa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:1f:cc:2c:c5:0f:4a:9d:e1:b0:a7:44:c9:e1:38:bd:d4:
         f0:e0:21:00:5d:63:5b:03:b3:0a:ea:c4:3e:32:63:8d:99:6d:
         af:31:95:4c:5f:c0:91:5c:c4:04:05:4d:36:73:24:0b:3b:5d:
         c8:c5:da:f5:ba:14:b4:7a:cb:3c:52:b0:50:5f:0c:18:9f:e7:
         ed:48:52:ef:8e:70:04:4d:25:73:1e:d5:fd:71:53:6e:bc:ca:
         9f:4f:ca:22:f7:5e:5d:49:18:39:a0:f8:31:88:6f:36:20:b0:
         59:99:48:57:d7:09:b7:e8:28:18:4a:9c:0f:01:c8:6f:51:9d:
         8b:64:1b:fb:dc:23:2b:ff:69:f2:66:dd:93:ae:e7:72:48:64:
         5e:a1:11:0a:a2:29:59:73:fc:6b:39:4b:ac:6d:d8:93:ff:bb:
         e6:b0:4b:1a:46:bb:0a:d5:37:a0:41:5e:bb:b9:3b:46:65:ad:
         3a:00:52:9c:5e:31:d6:09:c5:d7:89:6b:9b:4e:95:ff:cf:20:
         46:eb:65:bc:38:3c:5c:fb:00:00:be:42:49:65:f4:ff:a1:41:
         ff:1f:ae:71:7e:32:3b:6f:b7:c4:84:db:bb:26:77:80:67:b2:
         8b:2d:f4:ed:28:4c:80:a9:a7:ec:92:9d:55:cb:77:75:e8:8b:
         53:b4:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:19:56 2026 by rpki-client