Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b3c942-c4b8-35ea-9f8e-00a743d269a3.roa
File:                     74b3c942-c4b8-35ea-9f8e-00a743d269a3.roa (raw, json)
Hash identifier:          NXmBK66M54Gud2eNyKtbP6WI9nLXHyJiqsjwQrcXhIc=
Subject key identifier:   2D:F5:CA:9D:91:B5:A2:6F:36:97:54:90:57:13:95:51:20:29:97:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986DBBF88113B80D58793C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b3c942-c4b8-35ea-9f8e-00a743d269a3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40717
IP address blocks:        2001:503:d414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:db:bf:88:11:3b:80:d5:87:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=de424552-e80e-4a80-8e8e-fab03f3340ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:0b:63:ed:45:35:94:28:c6:43:3f:81:3e:
                    8b:38:a1:00:a5:44:29:93:2f:e6:83:23:82:37:69:
                    f5:a3:96:11:d6:51:eb:fe:df:7b:c7:3a:c3:5c:1b:
                    f6:ab:e5:62:04:b6:3d:a5:a2:65:51:76:e9:e7:66:
                    2b:8f:5f:2d:de:dc:01:c9:33:79:bc:45:83:d1:1c:
                    e9:35:5b:c4:3c:2f:8d:74:cc:99:90:fd:7b:89:7b:
                    44:94:9a:9b:be:aa:22:ee:b0:92:3e:cd:b3:67:32:
                    0f:0a:5b:c1:76:05:b0:9b:e3:07:c0:07:3b:6b:7b:
                    b9:63:49:73:68:23:0d:0a:3a:2b:40:7f:87:1e:e8:
                    ac:2f:84:93:6e:dd:7e:c4:49:1a:46:b3:00:a7:62:
                    6a:8e:dc:f3:4d:c1:10:80:23:d4:36:0c:fe:8f:a0:
                    a9:ed:79:71:99:0f:2b:f8:1d:0b:7d:d3:bd:fb:27:
                    77:4b:2a:8e:b9:83:a9:30:6b:54:73:38:11:6a:f1:
                    2e:e7:1b:44:d8:52:b6:8f:16:3b:b6:0b:64:9a:bb:
                    a8:6d:99:b1:fe:c7:db:24:a8:eb:6c:66:69:00:1c:
                    c5:cf:a6:49:b8:40:0b:e8:cf:0c:ca:80:0d:1c:78:
                    f9:18:5f:31:df:22:bc:c4:33:06:0b:2a:f6:7f:fd:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F5:CA:9D:91:B5:A2:6F:36:97:54:90:57:13:95:51:20:29:97:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b3c942-c4b8-35ea-9f8e-00a743d269a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:60:c6:fd:b1:82:7a:52:5f:35:38:f6:a5:3e:04:0e:37:da:
         72:47:a5:bc:6a:31:e3:e8:a7:ce:fc:94:cf:08:bc:60:cc:25:
         22:18:eb:0d:18:e7:3f:5a:31:61:29:9b:15:64:67:8e:dd:3d:
         29:55:4a:b9:d7:42:10:5a:c1:e4:db:98:b2:1c:4f:07:e8:77:
         44:78:2d:db:cf:01:e3:dc:95:10:89:d8:ec:72:17:a2:a0:2f:
         19:0f:39:33:56:56:82:e7:dd:6a:de:04:aa:25:c5:90:ba:fe:
         50:07:0e:59:08:2c:b2:cb:23:37:23:33:25:50:e8:db:77:87:
         4b:33:fb:99:c4:ec:c5:e6:24:2a:04:27:c1:46:e1:81:0c:cb:
         7a:1d:59:67:66:b4:dc:d6:60:4c:25:2e:ab:94:40:57:42:d4:
         dd:3e:d8:ec:dd:ad:db:67:18:a6:8e:3e:bb:91:c2:87:f3:f1:
         ae:df:88:62:4c:a4:0a:69:0f:b9:bc:3d:b5:5a:69:b0:74:6a:
         fa:3f:3c:b7:7e:49:f1:31:63:89:61:a9:d1:87:ea:dd:87:a2:
         49:3d:9f:1e:34:d1:fc:cb:40:d2:e7:ef:c2:f2:da:dc:53:05:
         c6:5c:ff:58:04:8e:80:32:1a:b2:7a:8c:99:21:9e:2a:7e:df:
         aa:8f:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:27:20 2026 by rpki-client