Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/466578cb-583f-3e8f-9ae1-466ca29a45b0.roa
File:                     466578cb-583f-3e8f-9ae1-466ca29a45b0.roa (raw, json)
Hash identifier:          OPbHI+4QjjionefbNzF+qdGWcdZX71adLtyTiTGkOjs=
Subject key identifier:   B0:17:8F:2A:1C:D2:06:94:82:A7:5B:05:35:E5:3F:A2:1D:16:E8:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498C31E4D03B2915F37F1F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/466578cb-583f-3e8f-9ae1-466ca29a45b0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396555
IP address blocks:        2001:500:856e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:31:e4:d0:3b:29:15:f3:7f:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=271ba94a-755c-4393-beec-e191c58d255f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:60:0d:88:4a:33:23:10:22:47:b2:93:cb:ec:
                    7c:95:4b:9b:47:16:f1:e4:ac:4b:6d:0d:f4:ef:bb:
                    d9:c7:1b:aa:ab:8e:06:ef:9b:12:9f:b8:07:7e:b6:
                    d3:cd:64:cf:38:2d:2d:69:7e:55:cb:d3:b0:2a:33:
                    a0:04:a9:10:ba:f8:52:20:00:4c:6d:04:90:9f:29:
                    c8:e0:63:c7:cd:34:20:a8:4c:04:aa:dc:fe:50:3d:
                    31:36:f9:9b:31:4f:63:72:35:c8:78:15:d2:93:89:
                    1d:f1:c8:56:8e:e1:5e:c6:9b:6f:36:87:08:0c:a6:
                    a1:6b:f9:6a:88:9e:c3:96:d6:6c:53:4e:74:af:e9:
                    65:b9:b1:2f:53:0b:ad:4e:7f:98:15:76:a1:0b:7f:
                    e3:7e:2c:8c:ff:23:d4:d3:31:67:11:78:85:62:f5:
                    30:3c:53:3a:51:23:6c:b4:39:d5:6c:95:84:54:67:
                    a1:63:78:1d:30:30:c8:91:05:df:5a:bc:9b:1e:19:
                    34:82:e5:b5:11:ad:5b:a3:41:7c:40:47:92:73:82:
                    7d:82:85:a3:69:6e:20:29:22:e1:44:36:23:89:e9:
                    e3:c9:cf:39:4e:38:eb:01:58:45:6e:ef:1b:56:13:
                    d8:52:2a:ff:42:30:4d:80:6b:3d:dc:ba:eb:c9:86:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:8F:2A:1C:D2:06:94:82:A7:5B:05:35:E5:3F:A2:1D:16:E8:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/466578cb-583f-3e8f-9ae1-466ca29a45b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d8:a3:d1:8f:84:ad:4e:b3:18:b1:9a:9b:93:22:8e:e9:42:
         09:50:03:20:e7:51:96:78:33:bd:83:00:86:16:21:7a:9c:b5:
         e3:c5:e0:37:bd:4d:26:6d:fc:57:d6:7b:08:f4:24:7d:82:cf:
         d7:0a:97:75:01:0c:37:f1:ea:8a:af:52:a5:9c:8a:7f:e1:6d:
         5c:62:2a:9a:df:e4:cf:15:85:c8:63:c6:af:f4:b8:7d:ac:4e:
         58:7f:3a:56:c6:6d:ac:9c:b2:04:ed:7c:cf:a9:51:32:39:28:
         c5:cf:d6:29:08:af:59:8b:4d:5a:63:33:a7:5e:b4:81:89:58:
         5d:0c:4c:5b:2b:48:fd:67:44:9c:ff:9d:2b:a7:8c:b0:0e:69:
         8b:0b:41:97:31:00:a6:14:a6:66:db:dd:b8:19:94:1f:5d:31:
         7e:ef:d3:bf:49:63:21:a4:6c:94:94:b5:1a:13:3f:55:66:e5:
         ba:49:8e:9a:fd:b3:25:1e:cc:ba:b5:3e:38:26:63:d3:61:74:
         6d:3c:59:93:e6:99:dd:44:06:b7:b3:fc:b9:15:54:a5:9a:f5:
         ee:01:f6:27:cb:68:68:ed:2e:2d:c6:06:b6:92:94:17:eb:37:
         34:14:4c:f3:b7:89:68:05:19:39:6b:44:04:f9:61:5a:f3:34:
         de:ce:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:28:34 2026 by rpki-client