Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b806975-0290-364d-aae1-d6d5da2301fa.roa
File:                     7b806975-0290-364d-aae1-d6d5da2301fa.roa (raw, json)
Hash identifier:          1NDJ1mnJh5Df7x9W8q0SqdZ3JJY/aAv4jOG3x7m3VL4=
Subject key identifier:   D1:AA:7E:F9:0A:AE:D5:1E:87:17:73:2A:45:00:E4:19:C1:4B:D7:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F080FB5A15D44632894CE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b806975-0290-364d-aae1-d6d5da2301fa.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396711
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0f:b5:a1:5d:44:63:28:94:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=d970d1c6-f791-4875-806e-c6275bf50f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:5f:c1:12:1a:55:ee:af:a1:95:00:1b:94:
                    99:e3:85:05:31:99:6e:4a:09:61:6e:52:53:6c:ba:
                    07:7a:29:c5:4a:5a:43:46:bd:87:cc:61:42:fe:12:
                    c6:94:b9:e7:43:a5:56:51:cd:3b:bc:48:55:d5:26:
                    55:7d:f7:05:d0:02:c3:f7:c0:fa:e3:20:dc:3a:e6:
                    71:cb:58:f6:63:90:0a:69:b0:97:fa:e1:45:ed:d3:
                    00:76:42:82:cc:b9:e1:a9:d1:1e:6b:4f:96:49:ae:
                    dd:ab:63:56:3e:20:dc:d0:9b:2f:a7:54:4a:53:c8:
                    f4:71:d7:e6:41:26:79:83:f8:80:06:11:d2:8c:cf:
                    f6:c4:81:58:9f:15:c6:be:4e:35:d2:b8:b3:50:9d:
                    51:b0:4d:a1:8e:45:78:d5:b5:ec:01:55:53:3b:b6:
                    f7:26:86:92:fd:8e:d2:a7:bc:27:3b:94:2a:fd:38:
                    11:c2:8a:69:07:3c:11:1b:5b:33:f8:e9:55:e9:bb:
                    69:81:d7:71:8d:83:a0:a8:3c:9b:79:b1:88:3d:47:
                    ee:c4:62:20:7a:b3:fb:8c:e8:f3:f0:a7:87:f6:dc:
                    04:d1:26:d8:66:2c:2e:c6:fb:72:08:30:d0:33:42:
                    5b:53:25:fc:41:d7:5c:23:ec:d6:20:db:ad:b5:31:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AA:7E:F9:0A:AE:D5:1E:87:17:73:2A:45:00:E4:19:C1:4B:D7:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b806975-0290-364d-aae1-d6d5da2301fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e7:6c:fa:b3:12:92:7e:dc:00:86:f6:52:fd:46:5e:c5:da:
         49:70:22:b8:d2:f7:fa:80:a3:6a:11:d4:66:1e:a7:85:e4:4d:
         1f:e9:5e:37:23:48:b7:f0:20:c8:71:0a:c1:87:eb:a0:4f:c9:
         68:55:fe:f7:92:db:12:9e:0c:70:0e:33:67:ac:85:d7:ff:82:
         b6:6e:1c:60:14:d6:88:8d:f8:dd:37:e2:bf:a7:8f:c7:8a:1f:
         b1:41:14:21:c2:c0:ce:b0:ba:b7:f0:a8:5b:ba:e0:7d:8c:64:
         39:23:aa:8b:e7:cf:cd:fd:41:87:b9:27:c8:ed:69:12:00:dd:
         19:46:09:f5:de:c3:ef:a3:1f:ea:11:85:ee:e2:c8:c0:bc:18:
         aa:60:8f:c6:5e:b8:4d:5e:5b:33:09:fc:fb:73:bb:59:16:52:
         c5:e4:ce:f9:b4:b0:3e:82:df:8a:88:d9:58:ad:ae:b0:4f:69:
         33:6d:d7:85:f7:da:7e:d4:fe:4b:0a:3b:2e:01:09:af:ca:35:
         7b:84:2c:21:42:d8:da:b9:0d:24:7c:0d:db:26:ba:91:c1:8e:
         4d:96:72:a7:c8:a3:33:f3:9d:51:6c:ba:de:e3:04:d1:e8:aa:
         76:9f:b5:ba:71:c0:2d:b4:fe:57:c8:ee:0c:cd:c8:5a:ae:6e:
         06:87:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:20:50 2026 by rpki-client