Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa
File:                     003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa (raw, json)
Hash identifier:          8pDzBSazkEE9Rus+iFrq1jJy+DgHAqV0s99kTYKSTZA=
Subject key identifier:   1A:CD:B4:C4:47:AE:B0:0A:5E:15:4C:21:27:B3:B1:52:91:54:4D:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3CE2AFB9E7BBA0310EC8BDA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     211369
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:af:b9:e7:bb:a0:31:0e:c8:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=83c99a55-a362-4cca-ab70-38a931c3f292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2e:b1:55:d7:85:98:74:6c:f5:de:88:63:04:
                    41:92:b8:7d:6c:19:5a:5c:76:88:f0:d7:ab:ae:b6:
                    b2:6a:32:3f:d8:d1:02:8e:31:52:6c:83:64:2a:0d:
                    ac:86:f8:ee:cb:14:7b:72:67:1a:36:3b:e5:b3:dc:
                    93:62:fc:37:21:ab:c4:81:8d:9a:17:c5:fb:34:25:
                    99:61:32:5c:4d:0d:47:af:30:5e:c0:1b:6c:f7:f1:
                    5b:ae:70:03:e6:3d:45:3c:39:7d:98:ce:ae:e5:07:
                    b5:d0:5b:7f:7a:68:d0:2c:4d:09:3a:ff:99:8f:37:
                    ca:9c:31:b5:13:1e:95:80:09:73:53:6b:ba:c7:a1:
                    3b:d6:17:a0:f4:29:25:f9:52:91:aa:ec:68:b4:ae:
                    47:fa:49:61:af:a7:d9:c6:9e:bd:9f:cc:52:e0:43:
                    15:87:cc:fe:4d:61:5f:84:2c:0f:07:c7:4f:03:df:
                    f5:e2:32:62:44:33:0a:fc:7f:64:1d:cc:f7:01:f6:
                    3a:8b:46:ee:ab:d1:49:2b:10:fc:52:1b:1e:4a:24:
                    ce:ef:59:9d:80:19:c5:88:e6:23:5e:a3:73:fd:e7:
                    99:9f:f6:93:ae:86:f0:7d:52:9c:ae:e3:f4:18:f2:
                    ba:16:06:00:f4:84:86:b6:02:d4:22:df:4f:95:dc:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CD:B4:C4:47:AE:B0:0A:5E:15:4C:21:27:B3:B1:52:91:54:4D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:63:52:9e:54:cc:d1:e5:f9:7b:d7:d7:dd:6d:2d:b6:d7:c1:
         e7:81:aa:de:c3:c6:39:43:99:d4:1a:96:ce:8e:42:39:b4:39:
         c1:82:18:87:5a:11:56:53:1f:a3:06:68:80:9e:b7:26:d6:f6:
         5a:f4:8f:eb:fc:63:a7:25:ca:56:4a:10:fe:6a:d9:13:1c:62:
         8b:26:9f:22:64:ef:4d:45:aa:aa:5b:a9:46:44:4d:ca:47:f9:
         70:63:76:de:77:2d:0d:7c:8b:de:6a:47:cc:ec:b1:59:cd:2b:
         71:f2:2f:33:26:9b:99:28:a4:b6:02:9e:5d:4d:0c:85:7f:1e:
         49:64:78:b4:7a:59:67:e8:c5:73:de:20:81:dc:b2:19:2b:23:
         69:d9:8b:a7:74:e9:a3:43:cf:45:4f:77:81:91:d7:43:f0:e3:
         b4:54:0e:f4:8b:9c:7f:82:12:a4:b3:87:a7:76:ab:59:f3:0e:
         8f:80:a5:ca:c9:eb:c6:9a:6e:a4:98:4a:0d:42:c7:55:83:08:
         c1:38:dd:66:8a:5c:52:32:0e:f5:fb:5d:59:65:8b:2f:d2:ac:
         51:fc:b8:96:91:b8:24:6e:12:93:95:e4:62:fd:7a:99:05:1b:
         ac:f6:e8:62:ed:b8:ca:74:04:fb:e5:0d:a3:2d:ff:d2:11:a6:
         51:6e:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:01:08 2026 by rpki-client