Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b3af14-b9b7-37fe-b3b6-d4f48d47b6b4.roa
File:                     22b3af14-b9b7-37fe-b3b6-d4f48d47b6b4.roa (raw, json)
Hash identifier:          YvMOHIN5se166xIXlQaT6ntq7IcfRck5j8AWwU8cqSw=
Subject key identifier:   DA:68:08:8C:80:88:B1:AF:D7:33:80:E7:7E:05:33:B5:A5:46:E7:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3CE27BC718854852E4F88500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b3af14-b9b7-37fe-b3b6-d4f48d47b6b4.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     40647
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:7b:c7:18:85:48:52:e4:f8:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=de214737-38a4-46f5-a48a-0cc94e9671b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:2c:37:b9:fc:5a:d5:c2:ca:df:8c:b2:18:
                    ba:21:f8:35:f0:07:3b:07:a9:15:8f:f5:03:0d:9a:
                    bb:b6:4c:7f:e0:38:43:d3:9b:d6:74:f5:34:ac:88:
                    d7:07:86:5e:e0:e6:0b:1a:90:94:fa:92:6c:cf:29:
                    69:ad:23:66:dd:b6:89:60:20:77:67:9a:cd:43:52:
                    c3:af:2d:74:a5:db:43:c1:88:2e:5a:85:f1:27:9b:
                    70:74:50:0e:58:f8:e6:88:ee:af:66:ba:a2:07:cf:
                    59:f6:d0:1b:5e:c4:4f:87:1d:36:1c:6c:61:15:e1:
                    97:ec:da:42:43:3a:64:5f:0f:9d:94:aa:7d:a2:32:
                    cb:d3:dc:85:3f:a5:8c:c2:a5:06:f2:91:ea:22:a9:
                    84:ca:32:a2:8e:46:25:f0:fc:f3:f7:e8:1d:bf:e6:
                    11:df:5d:7a:9a:cd:e7:c6:1b:1a:7f:4a:01:bc:92:
                    82:22:a6:d5:e5:47:ab:4d:7a:33:51:b1:1b:f5:cb:
                    c0:b7:d8:e4:0d:30:8c:a9:e3:0e:cd:ae:34:9a:19:
                    f5:e8:9e:e1:c4:0a:3b:7b:9f:50:3f:1c:58:d5:03:
                    f6:ea:63:f7:cf:26:94:37:5f:0a:e0:6b:71:ab:ce:
                    40:14:be:0b:f6:36:3a:ba:72:20:1b:13:62:dc:7a:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:08:8C:80:88:B1:AF:D7:33:80:E7:7E:05:33:B5:A5:46:E7:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b3af14-b9b7-37fe-b3b6-d4f48d47b6b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:1e:46:48:9e:a9:96:0c:8f:9e:92:79:9d:a7:33:2e:5e:c8:
         d2:3d:c6:55:84:51:8b:4c:24:53:ce:c2:e8:08:fb:e5:fe:e0:
         2f:60:b2:28:9c:c3:dd:2b:70:1c:58:94:77:cb:a0:59:f6:78:
         f7:d4:cd:e7:eb:dc:5d:00:02:04:3b:a3:9b:56:b5:aa:f9:30:
         8c:37:87:c1:a3:7c:38:a4:3e:0b:9d:5d:d6:55:16:10:70:f3:
         60:39:f3:d8:85:49:48:c2:62:c9:35:69:28:d8:11:05:73:8a:
         1f:43:ef:28:db:bf:07:79:b9:02:a4:32:89:df:e8:e3:fb:41:
         42:f7:15:95:86:2a:cf:73:5e:15:4a:15:e6:8d:fe:ac:f1:ab:
         77:82:75:07:53:8d:03:84:b8:d9:49:64:39:d5:f0:06:81:c9:
         0c:9b:b4:cd:d6:fb:7b:b6:6d:d0:14:8e:00:b6:96:15:d1:33:
         51:dc:78:20:35:2c:9a:26:9a:fd:22:33:94:27:2e:16:a6:01:
         b2:20:cf:1c:25:c8:1b:84:ad:f1:47:2e:ec:4d:02:75:84:cd:
         3c:e4:04:56:2d:85:47:2e:98:21:9a:80:1a:2f:31:8a:04:62:
         0e:80:9a:b7:da:e6:b8:f4:38:76:12:05:72:bf:6b:23:2c:cb:
         cb:40:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:24:44 2026 by rpki-client