Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48aac03e-32b1-39bc-86b5-32ea5f71b339.roa
File:                     48aac03e-32b1-39bc-86b5-32ea5f71b339.roa (raw, json)
Hash identifier:          ppbLEQe4CpcgTn9iWKWfRiqfGD0jBhGANXe/qMW2FPE=
Subject key identifier:   EB:68:00:96:EA:A3:58:65:8D:D4:D0:62:55:40:E0:8E:A1:8C:7D:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2ABD161A39F39F333C89E6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48aac03e-32b1-39bc-86b5-32ea5f71b339.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     396596
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:16:1a:39:f3:9f:33:3c:89:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=d13a6deb-5c1b-4fca-be2d-45459590d1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:f4:73:87:0a:b2:b6:b9:65:bc:59:9d:2c:
                    8f:b9:81:29:b1:7f:2a:08:1e:22:e8:f6:31:a6:da:
                    9b:55:63:f0:7e:b9:34:ba:49:65:2d:7b:75:3a:9e:
                    69:b5:41:ff:0f:6b:90:c9:06:7c:fc:83:86:0b:a8:
                    fb:dd:78:a4:82:7c:49:e5:46:85:b8:c0:bc:55:09:
                    fa:c6:52:0b:de:c7:c9:4a:05:7a:60:37:e1:67:ec:
                    4e:07:a2:94:1d:e5:40:6e:80:66:ea:04:32:e2:26:
                    d8:a9:56:5d:a3:ff:fa:46:08:aa:1e:86:46:cd:23:
                    ca:a5:bf:b2:80:0a:e4:bb:0d:14:b0:50:f2:87:45:
                    c6:ae:b3:29:a6:8a:f2:fa:cf:a0:07:8f:ca:3f:49:
                    e6:5c:3e:fa:69:47:58:5c:5a:44:fd:16:44:9e:19:
                    7a:53:50:7c:23:96:b4:cd:a5:21:91:cb:9d:dd:d1:
                    56:fe:80:0b:50:05:0b:2d:7c:71:17:43:e0:02:d6:
                    ca:b2:aa:ab:24:f4:9c:59:34:63:1f:3a:52:9f:7a:
                    ba:88:72:58:8f:94:dc:d3:b4:52:4f:e6:8b:3d:2a:
                    26:77:fb:02:96:6b:1d:60:73:aa:e4:e1:b4:44:b0:
                    c3:8d:a8:1f:fc:20:f2:bb:ef:31:30:8a:cd:2d:3a:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:00:96:EA:A3:58:65:8D:D4:D0:62:55:40:E0:8E:A1:8C:7D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48aac03e-32b1-39bc-86b5-32ea5f71b339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:57:b0:47:88:82:63:b4:22:13:9b:95:fe:1e:e3:2d:5f:04:
         86:f0:78:8e:f6:61:a4:04:49:6b:cc:ae:22:1d:b6:7f:cf:a5:
         ac:68:37:19:04:25:24:8b:6b:a2:e6:c0:da:ec:cd:04:e7:ee:
         95:53:f2:09:6a:a1:f5:51:01:49:a1:aa:18:1e:a1:4c:b5:ec:
         38:80:bd:94:fe:af:aa:dc:c9:fa:06:4f:3d:de:81:98:c5:8f:
         72:0a:58:8e:36:39:3c:ca:a5:e5:8c:79:2f:7a:00:e2:b3:a3:
         6a:90:57:d8:f5:a8:3a:ad:e9:b0:13:21:d3:64:de:f1:f5:51:
         79:43:5f:5e:dc:9e:db:6d:7a:52:a4:04:5d:b5:3e:0f:23:e6:
         c4:73:7c:6a:11:ca:ae:b0:0b:45:90:51:c4:19:d7:59:c3:7e:
         c7:1c:e1:5b:6b:89:b3:d6:f9:f9:e7:b1:bb:16:d9:39:5b:8a:
         3d:95:8b:da:b5:b2:50:8f:62:10:65:55:d2:49:99:13:d1:86:
         98:61:c7:2f:b5:71:64:d6:47:ac:32:90:e6:99:13:b1:c0:8a:
         a0:24:e1:9a:86:ce:fa:61:95:da:0b:f7:2c:33:c0:19:5b:67:
         1f:54:25:87:b5:92:5b:01:d5:d8:08:4d:23:fc:3c:2d:70:98:
         98:6e:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:51:11 2026 by rpki-client