Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e2a8eb9-9924-359c-9924-adfb96df560a.roa
File:                     1e2a8eb9-9924-359c-9924-adfb96df560a.roa (raw, json)
Hash identifier:          Erj1wufT4t0ayavVuKTH8fB/2hPbBn7RFk8XbDH7/W4=
Subject key identifier:   C2:8C:F7:BA:EF:F0:A9:11:F5:BC:9A:87:AC:21:CB:75:A0:98:D1:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49733706A1EC2A0A6BA73080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e2a8eb9-9924-359c-9924-adfb96df560a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396594
IP address blocks:        2001:503:d414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:37:06:a1:ec:2a:0a:6b:a7:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=50081cb1-e6f8-4b7e-8b20-285b2d30e0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:85:5f:20:f6:a6:08:2c:7f:80:0e:b4:bf:
                    69:16:1d:b3:f0:a5:df:c2:17:cd:bc:e8:64:7c:ee:
                    eb:bf:2e:19:04:fe:95:ad:e0:8f:ad:98:59:2a:3a:
                    7c:03:3e:f7:53:bf:31:6b:89:72:e6:52:65:7d:0a:
                    6f:10:8b:78:d3:1c:95:09:4d:bb:50:d7:46:a8:e9:
                    13:98:6f:0e:94:0c:fc:d0:20:35:15:db:d2:66:f1:
                    db:57:2b:77:0d:27:07:51:5f:b8:f7:e7:91:4d:5e:
                    f1:58:c3:d2:4e:c1:50:ef:08:2e:6e:45:db:01:f1:
                    67:15:f7:07:f5:34:1f:a0:03:74:d6:03:fd:9f:8a:
                    24:6e:45:a6:fb:22:5e:f1:a3:d2:74:4b:0f:f5:0d:
                    6f:67:8f:80:4a:70:db:53:94:15:ee:00:16:5d:02:
                    37:dc:21:ce:db:3c:f6:b7:f6:d1:39:35:e8:7b:c0:
                    ae:3c:a0:72:05:b7:69:a0:c5:0d:29:79:b4:e9:97:
                    7b:2e:a4:1f:85:64:4e:4f:0d:40:a3:d9:96:07:8a:
                    cd:15:52:4a:a9:ec:b4:05:80:2a:64:bb:0a:21:61:
                    b2:ca:5e:53:14:a0:62:53:a7:dd:3b:0b:15:87:23:
                    f7:1a:4a:0f:f3:de:49:a2:42:b4:79:f0:ff:1f:93:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8C:F7:BA:EF:F0:A9:11:F5:BC:9A:87:AC:21:CB:75:A0:98:D1:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e2a8eb9-9924-359c-9924-adfb96df560a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:a7:66:42:c6:bd:c1:fe:3f:f0:0e:2c:7e:10:8b:c6:5c:
         5a:b5:bc:dc:d2:51:7e:a8:f9:7f:63:e0:b2:d1:a8:d2:29:36:
         d9:eb:81:a7:4c:8c:5f:56:40:ba:df:d7:b3:a4:dc:7c:65:f3:
         98:53:a8:11:f3:8f:2e:48:8c:81:6c:df:01:d9:c2:7b:5c:0a:
         e7:4a:12:3f:d4:df:d6:87:1f:6f:47:1f:29:d3:0b:ec:e2:2c:
         74:e3:12:44:7d:2c:a3:2f:bc:6d:4b:b4:7a:ae:dd:66:63:38:
         bf:4a:d4:39:aa:5a:d0:5d:d4:26:7c:24:a9:d9:4d:59:5d:4f:
         44:25:21:ac:50:5e:e5:ba:0c:fa:f1:aa:a8:c3:a3:1f:92:25:
         8a:f4:08:02:f1:01:76:bd:32:eb:9c:06:22:d2:10:72:de:61:
         16:20:72:ba:4e:f7:c4:6e:80:09:36:9b:57:3b:ae:b9:3b:00:
         ca:06:34:da:6d:cd:5b:ac:d8:61:bd:fb:4d:bd:6c:94:80:11:
         41:01:47:b9:e7:7e:fe:97:8a:b6:60:fd:42:a6:df:9a:3b:a6:
         38:be:dd:15:04:f2:c4:f8:cf:bf:09:29:b5:cd:0e:f8:bd:df:
         20:76:90:7a:a5:9b:03:ea:99:fd:7f:c7:1c:13:70:6a:8e:46:
         a5:0b:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:31:52 2026 by rpki-client