Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b47fc2dd-45c5-3471-9603-f96d8b508e35.roa
File:                     b47fc2dd-45c5-3471-9603-f96d8b508e35.roa (raw, json)
Hash identifier:          7VYAnIFgTQ0F54hP4fzjeH/rqwxVpy1NAt/DQbo7/9k=
Subject key identifier:   E7:DB:FD:CC:FE:37:5D:B8:B5:49:C6:44:67:54:6E:7C:18:06:DA:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3CE2ABA8906D75DA58581600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b47fc2dd-45c5-3471-9603-f96d8b508e35.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     396543
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:ab:a8:90:6d:75:da:58:58:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=c9b673b0-7bc2-4842-9fb2-5e490534ce2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:45:0e:de:c7:4c:bd:e0:5c:c1:3e:c5:b3:
                    44:b5:f1:3a:d6:63:82:b2:9d:a7:aa:6e:c9:ce:c5:
                    8e:48:4c:93:57:fc:32:b2:c4:ae:9e:2d:0a:d0:90:
                    a4:c9:f8:85:df:bd:2a:84:11:d9:77:71:f3:99:be:
                    a2:4c:97:57:52:5c:14:9c:90:14:f4:26:d8:d4:91:
                    a4:ce:15:f7:3b:59:fc:14:e7:c9:7e:db:63:b3:a5:
                    21:62:79:48:96:bd:d7:0a:46:81:a4:96:9b:f3:e2:
                    c8:0f:15:d2:3d:a0:3a:dc:94:8a:4b:eb:e9:40:02:
                    7b:ff:75:a2:6e:08:a7:b0:37:7e:b7:3d:5e:b8:68:
                    4a:d8:dc:b8:47:ae:0c:24:ce:d9:5b:f3:fa:93:5e:
                    ae:dd:bb:38:a3:13:b4:e9:3d:72:91:95:16:cf:43:
                    d8:65:0d:69:47:c3:09:8b:22:37:6f:ed:89:18:f2:
                    96:de:09:38:8d:b0:32:96:3d:16:4b:4b:3f:a9:7c:
                    af:0a:03:b1:cb:53:9d:e8:73:e7:4f:7c:df:31:b2:
                    d3:12:d4:b2:2a:62:c5:a4:47:cd:22:f1:53:d3:7a:
                    e8:b3:68:93:52:63:af:34:3e:c3:69:b8:ac:11:48:
                    64:68:76:7c:94:a7:52:f5:51:e5:29:69:0c:ea:db:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DB:FD:CC:FE:37:5D:B8:B5:49:C6:44:67:54:6E:7C:18:06:DA:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b47fc2dd-45c5-3471-9603-f96d8b508e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:33:e2:e6:2e:64:b8:53:ee:71:a4:bf:f1:4a:39:34:80:ae:
         06:d4:f1:40:59:37:62:37:8f:1a:64:58:0f:d5:c5:26:d7:7a:
         8c:87:74:cd:be:5f:68:fd:10:33:5a:c6:d2:57:a7:37:46:34:
         92:9d:06:26:90:f7:37:3a:3d:44:40:65:30:fc:52:dd:c7:6a:
         93:a7:9b:99:72:1f:9e:f9:ae:d0:11:28:1f:f7:6a:1f:c8:10:
         33:00:b2:51:cc:13:90:c6:46:ab:10:7f:5f:88:4d:79:8d:05:
         9c:82:de:77:4f:12:89:4f:a6:58:d7:6f:66:f6:3c:de:b3:2d:
         15:20:40:e7:ac:f1:5f:10:3d:28:d8:f2:37:80:4d:3f:30:f2:
         40:1c:e5:89:d9:22:3e:ff:41:2f:2d:e3:f3:de:ab:a5:f1:3c:
         66:da:43:af:f5:45:d5:ba:12:83:4b:51:b9:bf:cf:72:83:9d:
         4e:e8:43:84:4a:2e:ae:f8:fd:2e:e1:d2:78:86:e6:c3:d8:b5:
         a4:4e:64:e3:be:83:e3:3b:dc:79:f2:f8:5a:96:8b:a5:5d:c0:
         9b:8c:79:9a:dd:c4:49:95:9d:70:74:90:43:44:4e:36:9c:fe:
         d8:ce:82:67:05:07:95:02:c7:7a:17:01:dd:80:49:5f:c9:ff:
         8e:2e:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:13:20 2026 by rpki-client