Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa
File:                     9ffa16d3-2d08-3707-98b5-07d9e1313429.roa (raw, json)
Hash identifier:          FHPK0kwsM9cXLoaXV8jlk/IkO9813aQNfw3vFMiaoOI=
Subject key identifier:   6B:E7:30:28:57:C8:DE:DE:42:DB:31:DF:85:C9:E9:89:0A:CA:1A:B6
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584F63F81B4A31110E9BC2AF8FC0
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     15116
IP address blocks:        2001:49d0:180::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1b:4a:31:11:0e:9b:c2:af:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=1bc1e866-c9f8-44d6-ba51-310bf7aecda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:1e:8f:cb:c6:de:b7:8d:53:a9:81:5f:30:
                    c1:44:6e:4c:50:f6:cc:f1:8b:4e:b7:17:c8:05:c6:
                    ac:54:da:44:96:08:d7:3a:39:c1:06:7d:59:2f:75:
                    99:2f:88:a7:ce:5c:85:d2:54:26:50:2e:28:00:d5:
                    c8:79:e1:9e:54:c9:21:97:e9:70:58:9f:11:cc:3d:
                    87:34:cd:d8:bd:89:6b:2d:d1:75:bf:73:7b:19:e6:
                    3f:28:c3:25:84:94:ee:c5:af:72:2a:45:ec:ce:bd:
                    a1:7d:1a:9b:de:22:13:c9:dd:47:36:83:37:03:ac:
                    61:2e:fe:80:c2:ff:3b:96:b4:ac:f3:54:88:2b:4b:
                    20:fa:b6:44:0d:d5:ca:11:e5:29:d5:36:a1:f5:0c:
                    46:2a:1d:e1:c4:b7:85:cf:1a:55:38:9e:74:a7:f4:
                    b1:69:5e:2d:4f:9f:66:1f:35:09:9b:b8:e8:fd:61:
                    43:f3:a8:da:3f:fc:d6:b1:e6:85:95:76:7f:fc:aa:
                    14:b5:00:2a:48:09:9a:f9:24:21:8e:53:97:ab:8e:
                    62:96:0e:aa:94:f4:05:af:16:1c:4b:d5:62:c0:a4:
                    b2:f7:b9:7c:e6:f8:fd:be:d5:ac:6a:fd:0f:10:c0:
                    3f:12:b3:28:a7:67:32:83:c7:c7:a7:8f:6d:f8:41:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:30:28:57:C8:DE:DE:42:DB:31:DF:85:C9:E9:89:0A:CA:1A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:180::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:ca:b8:25:dd:ae:d1:88:bc:96:cf:cf:35:20:ac:fb:97:
         c0:34:a3:ab:83:5a:9f:6f:eb:64:88:81:53:8d:c5:0b:27:39:
         b3:12:ee:5c:89:4b:9e:a7:33:5b:c6:c6:92:80:7e:b7:17:ec:
         12:fa:90:de:0b:48:d2:5c:ca:84:64:87:e9:3e:04:ce:ee:6e:
         38:23:b3:80:d4:2b:c8:4e:6e:f5:43:f1:d6:16:e2:5b:3b:a8:
         d2:a3:7f:d6:66:a3:a6:a5:44:80:ee:45:3d:94:dc:60:f1:1c:
         2c:17:ae:f0:56:7b:2e:c5:7b:b0:7e:40:7f:bc:ba:a2:02:42:
         2c:23:3e:c6:30:3c:3b:10:20:d3:bd:c7:43:2a:c6:c9:e8:df:
         7e:86:c3:a5:76:00:1e:4c:31:f9:01:84:1f:b0:31:6b:29:5d:
         f8:19:49:30:8b:e2:33:5b:7a:7a:ad:75:81:d8:d0:7a:43:f7:
         fc:49:5b:37:a8:7c:f7:0c:7d:9b:cc:36:c2:10:e1:68:8b:75:
         0a:af:b9:31:58:93:f6:d1:bc:82:65:8f:fc:56:36:64:8d:b4:
         67:c2:af:20:09:e4:b5:4a:47:58:c7:a3:03:d3:15:9f:74:de:
         30:c4:d4:7c:64:08:67:e3:55:17:2c:9b:a7:9d:71:8c:a4:52:
         03:33:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:46:12 2026 by rpki-client