Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dd63771-cab2-3319-a50e-5cb2d0e34d56.roa
File:                     2dd63771-cab2-3319-a50e-5cb2d0e34d56.roa (raw, json)
Hash identifier:          AgnkOQ8L4VyRp0nZ18KtK53IlJTUvManjGXtkMNrUAQ=
Subject key identifier:   A9:78:32:5E:3F:B2:13:D1:60:52:6C:A5:B6:4E:D3:80:A7:7B:CB:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49898B9F1DB22362DA1B2880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dd63771-cab2-3319-a50e-5cb2d0e34d56.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396596
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:8b:9f:1d:b2:23:62:da:1b:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4de87b59-60c9-441b-8de6-0cc409f569fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:65:d6:b2:e9:49:a0:8c:9e:95:bb:2d:5b:
                    ab:50:56:76:68:08:aa:43:e3:ab:38:48:79:15:9a:
                    ed:fa:f4:55:64:63:d3:25:9e:1a:7d:89:18:b9:39:
                    9a:26:9c:21:36:e7:3c:f9:ab:77:a0:2e:88:ca:16:
                    61:7a:7a:e1:c7:aa:8d:c0:44:1c:a3:55:6f:81:8a:
                    97:94:5a:d5:32:b2:cd:57:76:e7:d5:40:99:ee:d8:
                    e5:80:68:ad:4c:53:39:5d:9b:70:df:70:ca:0b:48:
                    3f:fa:b6:d9:dd:c0:22:c4:02:67:37:c1:de:e7:1a:
                    6e:f2:89:fd:b8:7c:e2:2e:1d:1e:07:5d:4d:16:d0:
                    43:fd:e8:59:35:b2:a4:e4:3c:b2:d7:53:8c:4f:57:
                    13:c9:1c:cf:32:bd:56:ec:8a:40:4b:8e:f5:3c:a5:
                    3b:53:8b:e3:1a:64:2d:db:ba:c6:a7:03:41:ef:eb:
                    b3:a2:11:0a:a2:de:1d:dc:d1:46:9e:9d:fc:01:c7:
                    8e:f9:00:33:ea:c6:38:fc:ce:db:89:86:03:0f:0f:
                    aa:28:d9:dc:ac:3d:2d:9c:52:8f:44:cd:d2:1e:f7:
                    d6:a9:73:df:d1:5e:3c:d9:60:58:de:d8:a0:7c:6f:
                    0e:39:02:29:5a:06:72:15:0b:22:2c:9b:d5:a8:bd:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:78:32:5E:3F:B2:13:D1:60:52:6C:A5:B6:4E:D3:80:A7:7B:CB:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dd63771-cab2-3319-a50e-5cb2d0e34d56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:15:5c:2d:65:59:e3:bb:8d:7c:eb:91:ca:bf:8e:c9:76:f5:
         83:9e:38:3c:f8:14:66:ef:d4:a4:75:87:66:73:4f:d8:4f:8c:
         9e:bc:02:52:3b:51:7e:44:7b:94:98:14:c9:af:d6:40:7f:2e:
         cc:2a:1c:45:36:6f:f7:a8:c8:0f:e3:a0:37:fa:4b:42:33:fe:
         21:48:f3:df:e2:d7:18:1a:78:dd:0f:63:3c:0c:3c:c8:bd:7c:
         e6:f7:30:e3:d3:98:ed:a3:9f:67:ff:7f:bb:3a:80:44:a3:6e:
         be:ca:52:05:4e:73:f9:2e:d5:38:a6:6d:88:3d:52:a4:b0:bd:
         c0:2d:2d:a9:05:5e:58:11:bc:a2:91:fa:05:4b:00:1f:35:5a:
         44:f5:c6:09:b9:91:3a:db:96:73:9d:c5:94:3a:e3:07:ff:86:
         52:f7:c7:a0:04:a2:88:c6:98:fd:9b:f5:7d:65:68:eb:70:d8:
         47:91:d7:00:77:90:a8:5b:e7:d4:2c:9d:25:96:3e:c1:37:8f:
         d2:78:e3:d0:54:63:54:38:42:b6:a6:fa:78:7b:fe:0d:eb:25:
         d3:64:1a:68:af:58:08:dd:25:20:63:67:4f:c5:59:49:41:f0:
         b4:f5:ca:f6:c5:ab:71:6a:91:a1:81:84:88:56:77:3f:fd:15:
         dc:28:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:50:54 2026 by rpki-client