Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3dbe3f0-66b1-3cf0-8718-bb84db164230.roa
File:                     f3dbe3f0-66b1-3cf0-8718-bb84db164230.roa (raw, json)
Hash identifier:          Qm8WNWngU6JvKjbEuT72G9pFKIE+Af+DufPy+fidi14=
Subject key identifier:   8C:C6:C9:0C:3B:1C:5D:E7:15:C6:66:60:76:68:71:5C:06:7D:26:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4C3D59FD7CE68E9DDEFA1440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3dbe3f0-66b1-3cf0-8718-bb84db164230.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     397210
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:59:fd:7c:e6:8e:9d:de:fa:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=54e5264a-739a-4647-963f-8c1f25c4e01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:e4:65:80:c2:a5:91:1b:70:b4:76:3a:48:
                    4b:5f:b4:17:5f:08:a7:9c:31:6e:1a:47:eb:3b:e9:
                    9d:70:bb:a0:37:06:31:35:b1:e7:d0:92:a9:86:71:
                    a7:dc:f6:dc:13:29:b7:32:4e:57:b9:a0:67:7a:ac:
                    d9:6e:fe:62:c5:17:c1:b6:d5:9b:52:cb:f7:69:99:
                    75:e7:00:60:da:05:a5:ca:67:9b:6d:e7:e5:73:5f:
                    f1:d3:e9:3c:15:c4:15:7b:f2:fb:5e:a2:f4:3c:5c:
                    51:19:69:12:65:a8:be:b7:c1:cc:61:21:2a:ce:98:
                    3a:b8:ae:ac:ae:23:c5:66:05:5b:4a:64:f6:35:63:
                    ef:0c:ff:f5:2a:d3:d6:6e:fd:0e:eb:e9:77:75:31:
                    7b:81:f1:2b:01:b3:d9:d7:55:d1:39:0e:11:c3:6a:
                    5d:48:12:ff:d0:7c:cc:dd:41:9e:39:0f:02:21:20:
                    a0:00:e5:0e:05:3b:a9:72:ef:cc:e9:8e:1b:0d:a2:
                    31:0b:b8:1c:8f:ce:c9:96:65:f5:26:08:e6:62:98:
                    9d:2f:6b:b0:75:8f:39:b6:50:14:55:46:22:ad:54:
                    b5:7c:2c:c0:76:2b:55:14:f1:21:07:16:e0:9b:29:
                    d6:d6:59:07:94:68:5d:e7:ae:d8:40:e0:3a:cd:e0:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C6:C9:0C:3B:1C:5D:E7:15:C6:66:60:76:68:71:5C:06:7D:26:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3dbe3f0-66b1-3cf0-8718-bb84db164230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e4:ad:73:a4:83:7a:47:12:e3:c6:6e:c5:23:85:e1:6e:48:
         81:ff:ca:a7:fa:a4:03:ae:7d:aa:dc:00:97:d1:b3:ae:bd:1c:
         4b:56:44:72:27:b9:5f:31:33:eb:9b:36:dd:47:5d:3c:4e:f7:
         75:99:1e:b7:4e:d2:92:dc:67:fb:0f:d7:6f:69:7c:29:49:d5:
         e1:21:5b:37:97:cb:d2:dd:ea:b7:4a:8b:4d:54:7e:f8:ba:c0:
         06:7f:f5:5c:46:86:2d:04:cc:a0:03:8c:ae:95:4b:fc:16:ff:
         b7:7e:a1:4b:90:db:d3:d9:3c:01:d5:be:e3:53:14:78:43:30:
         68:f9:d0:d2:dd:4e:74:7e:cb:67:20:ab:22:85:c5:5b:bf:d1:
         5d:7b:a0:f3:91:60:a9:1b:f4:4d:87:c2:05:75:18:cb:7e:3b:
         26:ec:f7:b8:cf:10:80:6f:0f:b0:10:c7:0e:0a:e6:1f:1a:10:
         b7:1e:0e:14:59:f0:ca:14:ce:00:98:44:2e:72:91:28:d4:6e:
         37:94:73:8d:ed:4c:05:fe:30:e4:52:0c:28:d7:ae:d7:b6:53:
         5c:da:f0:f7:25:f2:fe:67:cd:45:10:a8:6d:6b:3a:2f:06:13:
         d0:51:86:70:61:20:6a:44:2d:e4:cb:45:21:78:0c:48:c3:f7:
         28:f0:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:41:02 2026 by rpki-client