Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0addf7f3-ca6e-3547-b480-0347d27e19aa.roa
File:                     0addf7f3-ca6e-3547-b480-0347d27e19aa.roa (raw, json)
Hash identifier:          BvMu0MZMfPkYH0CUzZNU87MIQm+6LR0ZJOQ6j0Uvouc=
Subject key identifier:   F6:F3:DA:DB:37:71:2B:30:47:7B:55:A9:57:E2:A1:F3:70:6A:87:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7A5EF504C8A0344724C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0addf7f3-ca6e-3547-b480-0347d27e19aa.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396541
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a5:ef:50:4c:8a:03:44:72:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=485010b0-2d55-40d9-a8b5-51bd050f900c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:6f:0d:b6:b1:f9:bb:6c:bf:17:88:bc:44:
                    a4:b8:8c:f4:39:a1:7d:2e:9c:49:95:d0:16:bd:d1:
                    5b:c4:50:52:4d:ad:f9:16:7e:46:07:03:3b:e2:65:
                    30:38:3b:f3:88:0a:cf:a3:51:a0:cd:b5:4f:89:69:
                    f3:45:3b:cd:61:8e:d0:9b:50:76:c8:35:cf:f5:4f:
                    09:9b:ff:c6:c4:a8:0b:db:af:fa:cf:1f:54:d3:a6:
                    3c:ed:a9:b6:b6:c5:53:b7:f2:32:4e:19:a5:31:ae:
                    22:42:fa:5a:4f:1b:30:69:bf:24:fc:d2:1e:2d:52:
                    17:88:66:2a:ba:72:f8:8d:d5:96:f4:5a:dd:34:72:
                    c3:04:13:2d:e5:12:7b:6f:4e:5c:12:ce:2f:1e:dd:
                    8f:03:1d:78:81:bc:6a:b4:d1:ec:0f:34:7c:69:91:
                    8b:c4:a8:02:5f:f3:f8:a1:c3:23:0a:e5:81:ed:26:
                    8d:7a:6c:e0:c7:40:82:22:14:70:68:11:d3:bf:88:
                    50:53:a2:02:5d:a9:5c:87:29:27:ba:59:6b:97:1f:
                    67:25:d0:0b:9d:3b:ae:b2:b6:93:33:bd:b7:34:5f:
                    d8:42:21:e5:f4:07:a4:91:f5:1a:9e:3d:00:d8:57:
                    a3:3f:44:53:3f:14:a0:5c:cb:ee:67:35:06:fc:7e:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:DA:DB:37:71:2B:30:47:7B:55:A9:57:E2:A1:F3:70:6A:87:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0addf7f3-ca6e-3547-b480-0347d27e19aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:e6:85:d6:b5:fe:3c:60:22:1f:35:40:1e:06:38:69:7c:
         40:7b:0a:d2:92:7a:fb:63:8e:d1:27:49:c6:a8:0a:5d:b7:e1:
         72:04:23:01:ba:3d:ed:da:1d:a4:bc:7f:83:9d:86:55:b5:2a:
         65:bd:0b:3b:2b:f8:6a:4d:5c:d6:ae:04:ce:c1:b4:92:59:15:
         b3:2b:a6:43:7c:0c:c6:07:cb:1e:17:9c:cd:e6:f4:9c:df:a3:
         25:91:50:53:e9:6d:66:d2:e4:92:7d:81:38:73:e3:e9:59:77:
         e4:68:24:7b:a8:0b:d1:3d:a6:a4:7d:6b:13:2c:df:35:6d:86:
         f3:69:3e:99:74:94:33:40:c8:21:fb:d2:96:e5:90:e6:42:f5:
         ed:7c:00:32:43:59:7e:a6:58:41:9b:82:22:ef:36:ef:f2:8b:
         4c:e2:25:3f:6b:fe:ba:80:c1:c5:ac:4b:cb:94:af:79:74:be:
         17:e0:6c:d5:87:c2:74:d6:a9:01:33:58:5b:de:cf:bd:c9:21:
         36:b5:2c:c7:4e:98:45:d9:1a:99:e6:fa:31:62:90:f6:f1:4f:
         be:43:31:1c:f9:36:18:41:78:b1:b2:46:bb:97:d8:00:77:9e:
         ee:e2:20:4e:07:07:42:af:ed:2a:bc:36:8a:ae:c5:7b:12:02:
         aa:fe:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:01:15 2026 by rpki-client