Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bda51a7e-5ecc-3c3c-8ff6-97ec71eab900.roa
File:                     bda51a7e-5ecc-3c3c-8ff6-97ec71eab900.roa (raw, json)
Hash identifier:          pa5ur2pRQXn0faGk63zkUas0+m0Nx0KN7Kx4EIJGDZI=
Subject key identifier:   C9:FB:39:95:11:80:0F:FD:D5:12:23:9D:CB:0A:B5:44:2F:B0:60:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F549D5DCF9D874AA0BD6C6E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bda51a7e-5ecc-3c3c-8ff6-97ec71eab900.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396545
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:5d:cf:9d:87:4a:a0:bd:6c:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=bd745832-41d4-46bc-bce9-50e4a066ad3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:4a:42:55:fe:9c:02:b6:9b:d7:6d:f1:76:
                    e7:e3:41:cc:e5:74:c4:03:5e:c1:41:e7:09:f2:80:
                    e1:9e:a1:7c:12:54:71:7d:7c:03:bc:e6:53:0c:21:
                    92:0b:15:a8:7b:ec:86:29:30:66:61:f2:aa:c5:38:
                    37:0f:22:b8:ac:8a:88:7d:68:20:a3:d0:30:d8:02:
                    86:0d:04:67:24:4c:ff:ff:4b:a3:a4:b8:f7:7d:0f:
                    e1:0c:c5:51:5c:f2:f9:7b:27:52:95:a7:49:65:d5:
                    f8:48:6e:87:a5:f3:ae:96:9f:ff:f2:08:45:0f:8c:
                    f6:f4:f9:db:2e:4b:8b:fe:72:24:37:a6:0b:36:51:
                    46:6d:5d:f1:5a:62:06:ea:02:52:63:d3:45:7f:2c:
                    60:a0:00:8c:e8:60:c5:fe:a0:0d:65:b4:bf:8d:44:
                    a3:30:8b:e2:4f:73:84:b3:c9:4a:50:4c:03:b9:3d:
                    0e:3a:68:17:8e:92:2f:d9:94:9d:9b:71:4d:92:23:
                    2f:6f:3d:2c:21:e4:78:64:a9:11:74:4d:6a:86:34:
                    f8:45:d3:fd:82:df:0a:25:dc:27:93:cd:21:78:0d:
                    b3:4f:77:44:2d:67:18:31:ea:70:e4:d0:b2:72:26:
                    3d:c6:37:b9:56:5a:85:66:6e:3c:ac:7b:32:90:48:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FB:39:95:11:80:0F:FD:D5:12:23:9D:CB:0A:B5:44:2F:B0:60:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bda51a7e-5ecc-3c3c-8ff6-97ec71eab900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:0f:16:86:df:19:c2:a3:99:d7:8a:79:b5:2c:2c:47:6c:9d:
         ef:9c:42:d9:24:28:cb:64:28:80:b5:36:d0:e4:56:6d:a1:24:
         2a:33:26:96:1a:92:17:54:db:51:87:2d:24:ca:2b:66:c1:bd:
         91:33:e7:0e:4f:1c:3d:2d:df:a9:5a:f9:d8:91:b0:2b:b0:0c:
         2d:91:1b:15:2f:cb:d5:61:25:c0:bb:f6:24:df:8e:3a:dc:1e:
         3f:cc:9d:7c:98:91:2c:bc:e4:81:66:2b:1b:7b:e1:e3:3c:27:
         08:ef:b9:d9:51:55:7f:12:4d:64:3e:50:a1:7d:a7:ad:1e:21:
         47:a5:ca:e7:70:3e:51:96:e2:c9:fd:be:b5:c0:84:9e:3f:29:
         e0:ed:19:28:3d:e7:43:cd:ea:c6:ac:51:81:d5:4f:c1:fc:3c:
         03:04:6c:37:cc:86:6c:ed:2e:8c:7d:90:cc:21:6b:d0:d6:63:
         f8:d5:da:b0:bc:df:6a:be:2c:45:d5:65:e3:0b:fa:65:d4:26:
         d5:a1:20:e8:59:34:11:89:eb:18:67:3d:85:82:a7:a8:bd:a0:
         1e:a1:84:b2:72:40:0d:23:37:9b:a3:b2:73:18:da:80:7b:ff:
         22:de:13:01:21:aa:65:a8:59:5e:59:59:47:cd:b9:10:1e:28:
         11:40:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:58:16 2026 by rpki-client