Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92225f15-c6c4-325c-b253-ee6068fb9309.roa
File:                     92225f15-c6c4-325c-b253-ee6068fb9309.roa (raw, json)
Hash identifier:          XfD+L3K4pgYTvwkX+XXR3Tn1CeaJQprYgCBsvPnVFVg=
Subject key identifier:   24:CE:4A:9A:C5:7A:3F:61:3B:3D:D6:E2:81:8C:66:EA:7A:8C:56:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F473375E8CC95A61F3980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92225f15-c6c4-325c-b253-ee6068fb9309.roa
Signing time:             Tue 28 Apr 2026 14:57:07 +0000
ROA not before:           Tue 28 Apr 2026 14:57:07 +0000
ROA not after:            Mon 27 Jul 2026 14:57:07 +0000
asID:                     396594
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:47:33:75:e8:cc:95:a6:1f:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:57:07 2026 GMT
            Not After : Jul 27 14:57:07 2026 GMT
        Subject: CN=905cd67a-0a49-49bc-bb45-6dd84b9b6bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:b5:28:45:00:5f:55:6b:88:e2:47:35:9b:
                    6d:db:59:26:a4:0f:68:a8:5d:cf:10:b1:50:22:aa:
                    ba:e4:89:16:4b:1f:a5:19:9a:c1:54:47:6d:fc:ce:
                    91:2e:d3:6f:f2:7d:26:cf:93:54:14:c6:c7:0f:9e:
                    a5:35:18:c6:85:a9:ea:6a:9b:9b:ef:05:45:33:f7:
                    c4:00:ea:a3:75:32:f4:83:43:4c:32:da:49:b8:ea:
                    63:74:8e:47:6a:6f:90:0b:2c:37:c0:5c:7c:89:59:
                    5b:91:a3:64:68:19:55:47:1c:a8:94:af:52:32:db:
                    f2:be:e7:f0:f5:62:14:ac:ec:fc:1a:86:c9:6a:ee:
                    7a:7a:23:ff:79:f0:89:b1:e7:04:37:06:dd:4f:d0:
                    16:ec:5c:91:fd:00:eb:0b:b9:e5:9e:e5:d3:49:24:
                    5a:3c:0a:01:91:ad:b7:b8:03:b1:7b:03:96:c8:64:
                    cd:53:a8:5a:8a:03:e6:fa:60:b8:66:56:11:61:f9:
                    e6:cd:8f:76:b4:ad:10:3e:90:3d:ea:9b:d4:c2:ed:
                    df:8e:39:3c:81:2d:b0:77:dc:ab:a4:5a:93:1e:ff:
                    8b:49:83:f3:b7:4a:3c:71:0b:51:dd:2a:6d:ba:34:
                    5b:30:4c:30:a4:d3:1c:86:56:1d:7f:2e:6e:ca:57:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CE:4A:9A:C5:7A:3F:61:3B:3D:D6:E2:81:8C:66:EA:7A:8C:56:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92225f15-c6c4-325c-b253-ee6068fb9309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cf:0b:35:33:bb:75:63:9a:55:91:a2:18:20:82:8c:d7:69:
         3c:eb:a2:a7:bd:58:49:58:35:c5:6a:44:71:9a:8d:0d:c1:8c:
         e6:78:36:73:34:6c:de:9f:84:4f:b1:a1:06:e2:f6:59:ec:01:
         f0:47:db:f9:68:69:27:14:e2:5f:ad:ba:50:ad:b0:49:74:c5:
         95:10:bc:75:a6:ae:4e:4e:a8:f8:5a:dc:62:da:ac:29:2e:26:
         cb:26:93:5b:d5:84:00:09:2d:6c:db:fc:ae:0f:4b:94:68:de:
         41:20:62:a6:13:54:00:47:c4:e7:33:84:3c:aa:03:1a:dc:76:
         a9:ca:ce:8d:5e:13:63:de:08:a6:b2:f0:a9:13:20:6c:53:f4:
         13:e6:2c:4c:b8:d8:99:d9:0a:e1:45:2d:cb:aa:e3:76:8a:bf:
         2b:67:f7:3b:9c:73:eb:38:d9:fe:81:07:bf:25:9b:0e:d7:42:
         8d:0f:6d:b6:7f:e0:47:eb:16:ed:a5:57:09:01:70:96:f5:84:
         36:24:03:ce:d9:ca:07:49:cb:03:19:78:93:06:4f:60:8c:4b:
         5d:52:52:8c:ef:70:64:10:42:a1:24:c8:ad:26:bd:13:39:aa:
         a9:23:dd:2a:35:fc:76:ae:d6:07:c1:4d:b4:3d:19:3e:2a:d8:
         21:06:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:21 2026 by rpki-client