Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3/495bf1e5-30fb-3d0a-8cd0-c7f40a31bc55.roa
File:                     495bf1e5-30fb-3d0a-8cd0-c7f40a31bc55.roa (raw, json)
Hash identifier:          QzjHAVyx9P87dqjFnoG8mG5D3dNwstGJ71wCCrc3RgU=
Subject key identifier:   16:7D:76:5C:53:A6:57:4F:3C:AF:7A:55:C2:83:A9:15:CB:C6:2B:EA
Certificate issuer:       /CN=455263ff-1a61-4328-aa47-cbcedf7cf0d3
Certificate serial:       010D0C9F4328584F1EE1775AA538AD7941B566A8
Authority key identifier: 59:DC:66:9B:5F:9B:53:1A:B3:50:0D:D9:4D:47:32:2E:F4:5B:EC:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3/495bf1e5-30fb-3d0a-8cd0-c7f40a31bc55.roa
Signing time:             Wed 09 Sep 2026 19:03:59 +0000
ROA not before:           Wed 09 Sep 2026 19:03:59 +0000
ROA not after:            Tue 08 Dec 2026 20:03:13 +0000
asID:                     394099
IP address blocks:        2607:bce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3/455263ff-1a61-4328-aa47-cbcedf7cf0d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3/455263ff-1a61-4328-aa47-cbcedf7cf0d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:e1:77:5a:a5:38:ad:79:41:b5:66:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455263ff-1a61-4328-aa47-cbcedf7cf0d3
        Validity
            Not Before: Sep  9 19:03:59 2026 GMT
            Not After : Dec  8 20:03:13 2026 GMT
        Subject: CN=093f4936-0dd3-4456-aa1e-fccd39310f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:7d:43:af:74:23:96:fe:e9:0b:13:19:d0:
                    8d:2b:16:8f:af:66:d4:8c:46:30:17:82:2c:71:2a:
                    fc:c7:db:6e:ec:91:00:4e:7c:56:3d:64:4c:cd:2c:
                    6c:c5:d9:0f:1e:5a:6e:59:ef:45:30:8a:ce:26:24:
                    f2:3f:2f:9d:c0:ce:64:3c:fd:d6:57:90:ed:30:02:
                    76:23:22:8f:7f:4c:3f:33:32:48:a1:de:3a:d7:87:
                    78:52:8f:86:b3:d1:02:4f:d3:d7:58:5e:b0:fc:27:
                    ee:46:ea:5c:e8:2b:be:11:da:f0:75:cc:37:f7:9e:
                    f9:12:7d:7a:73:3c:13:49:81:05:a2:9d:d6:de:47:
                    51:fe:fa:cf:5c:0b:50:71:8f:94:2b:7b:5d:4e:92:
                    73:fa:b8:3c:da:b1:05:37:b8:b7:fb:de:f4:75:f1:
                    0f:e0:65:a7:6f:67:76:f0:00:d5:df:16:21:58:fa:
                    8a:2f:b2:e4:06:1d:dc:37:23:e2:50:af:5e:88:c7:
                    b2:a7:ce:f1:ab:4c:0e:61:39:57:3f:73:63:62:72:
                    39:3e:62:54:cd:24:b8:7f:d5:78:cf:2f:76:b6:2f:
                    c6:d3:2f:43:96:1b:3f:e6:4b:4e:88:75:ff:18:39:
                    c3:a3:f5:ec:a8:2d:c3:99:e8:27:cb:d8:51:de:93:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7D:76:5C:53:A6:57:4F:3C:AF:7A:55:C2:83:A9:15:CB:C6:2B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3/495bf1e5-30fb-3d0a-8cd0-c7f40a31bc55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3/455263ff-1a61-4328-aa47-cbcedf7cf0d3.crl

            X509v3 Authority Key Identifier:
                keyid:59:DC:66:9B:5F:9B:53:1A:B3:50:0D:D9:4D:47:32:2E:F4:5B:EC:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/455263ff-1a61-4328-aa47-cbcedf7cf0d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bce0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:48:c4:be:ba:f4:3e:71:e6:6e:e7:55:de:7f:ee:0b:3b:
         2b:8b:07:2c:00:3b:19:71:cd:2b:b8:cb:9e:ba:72:75:be:20:
         db:b8:a4:47:e0:43:ee:2b:4f:e1:ea:49:b4:02:79:8b:75:bf:
         61:e9:dc:2a:64:d2:12:81:5d:4d:79:b6:b3:3f:23:62:04:d7:
         62:b3:62:43:c0:d1:77:33:3d:6c:8d:fc:36:82:1e:b6:09:10:
         c2:bb:be:a7:71:b3:19:cf:a7:c6:e1:c8:43:56:9a:0b:d3:01:
         b0:14:97:5f:b3:27:bd:f2:bb:ed:e7:60:7c:f3:67:b2:9d:13:
         c6:b8:da:cf:91:c0:22:ff:c3:a1:59:b9:b8:64:2a:86:8c:0a:
         54:7e:6e:34:2c:9d:ec:d0:7b:1b:e6:48:d4:a9:9a:d5:26:9c:
         cb:cd:60:cc:3c:12:b2:c9:a4:d3:ad:82:f7:50:c5:1e:b2:b0:
         60:c1:05:93:be:da:83:72:ca:65:58:0c:9e:2a:34:50:04:7a:
         60:2b:6e:f2:f2:22:e4:98:a9:38:0e:ed:03:55:10:3f:22:00:
         0d:75:22:b0:10:38:b7:3f:f3:4d:29:ef:03:88:41:23:a4:c2:
         4a:f4:aa:33:ed:cc:e0:5d:3b:17:bc:81:8d:15:1f:22:95:c5:
         cc:fd:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:34 2026 by rpki-client