Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/c16f2047-850a-3632-aac7-6532c6de854c.roa
File:                     c16f2047-850a-3632-aac7-6532c6de854c.roa (raw, json)
Hash identifier:          Mg7h5gL1hrEK5TEA6boObTukKhz2u8JNcnJFuGR8lPA=
Subject key identifier:   58:24:8D:3B:63:7D:80:E4:89:C9:D0:2A:B4:B9:78:B6:25:FE:3A:0F
Certificate issuer:       /CN=94468bc3-3532-4788-950a-08cd97f124e9
Certificate serial:       010D0C9F4328584F20F7D881DF0D8850FAAC3000
Authority key identifier: C7:EF:7E:0C:8D:4E:2A:91:B5:9C:90:61:7D:B2:44:35:50:4E:D5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/c16f2047-850a-3632-aac7-6532c6de854c.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     142281
IP address blocks:        2607:8cc0:8be1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:d8:81:df:0d:88:50:fa:ac:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94468bc3-3532-4788-950a-08cd97f124e9
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=bd0ade73-3ea1-4111-975f-0b9fc12122ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2c:26:11:bc:f4:d6:ea:dc:68:ad:ac:f1:fa:
                    5d:54:b5:ef:3e:5b:89:bf:0e:4a:5a:45:1d:e2:e9:
                    31:fe:2c:2b:4d:b5:dd:7e:fa:78:b0:aa:bd:f6:25:
                    26:63:15:9f:b5:b2:66:23:06:35:92:07:8d:03:0e:
                    48:79:a7:26:2e:b8:3b:f5:5d:70:7b:54:0e:19:b1:
                    fe:a6:1f:ca:58:ca:ed:eb:c1:bc:de:2f:e4:79:d6:
                    59:48:39:95:eb:d3:41:46:3d:ad:46:aa:fc:b0:8b:
                    5a:cc:2f:23:d5:af:d7:62:84:3e:ac:63:5c:b3:ab:
                    e3:ad:8a:d8:44:46:25:f8:71:ca:3c:24:c7:a1:66:
                    93:f1:e3:16:04:b4:dc:c7:cb:0d:2e:4c:f0:0e:cf:
                    8d:bd:ba:1b:83:f3:7b:3b:51:3a:44:8f:9e:ef:56:
                    ce:33:06:74:ed:88:48:5f:1f:a7:8e:8d:db:f8:5c:
                    ff:44:34:e8:1c:4b:62:19:67:5c:de:30:4e:3b:8f:
                    d6:74:30:bc:54:69:b7:9c:ac:f8:49:52:f1:29:4b:
                    53:49:52:42:20:46:63:19:49:03:19:a3:3c:36:74:
                    43:2a:be:8c:2e:da:39:7e:5c:8e:80:66:12:ad:af:
                    d0:15:99:99:df:b1:0f:34:84:02:33:9d:4d:69:c7:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:8D:3B:63:7D:80:E4:89:C9:D0:2A:B4:B9:78:B6:25:FE:3A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/c16f2047-850a-3632-aac7-6532c6de854c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.crl

            X509v3 Authority Key Identifier:
                keyid:C7:EF:7E:0C:8D:4E:2A:91:B5:9C:90:61:7D:B2:44:35:50:4E:D5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8cc0:8be1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:38:9f:84:53:0d:b9:74:b3:3b:2f:74:d2:04:b1:e2:8a:fb:
         03:03:65:ca:bf:6c:b5:40:e1:d8:79:14:3b:15:93:99:f7:a4:
         56:65:c4:71:8d:35:83:84:5c:01:93:ba:99:46:c5:40:b5:f5:
         6c:8c:5a:17:47:57:d7:bc:41:f3:14:9b:b6:b5:98:06:d2:da:
         2a:3b:bb:bf:9b:86:ab:4e:00:a1:9c:67:f8:a0:79:c8:2a:ce:
         f7:ed:c3:98:ce:a9:0f:38:ee:c0:75:fe:70:d4:5e:25:a9:82:
         32:70:80:cb:06:37:31:c9:8d:f2:2f:09:15:87:76:b1:61:e0:
         a5:81:47:90:2e:fe:1b:d4:5f:86:08:cf:10:a5:c6:26:b6:bf:
         4e:48:a7:63:08:28:81:52:f3:41:e6:82:f3:8f:9a:57:cd:74:
         62:30:84:01:7b:b5:41:e0:ad:e3:00:c2:05:c0:d6:09:57:2d:
         60:fa:77:91:87:2e:dd:ac:02:f6:30:38:0a:02:bd:a8:55:6b:
         ec:8f:54:e9:da:dd:92:f7:6f:36:00:cf:b2:85:3c:fd:43:00:
         9e:e5:e5:fa:84:10:4d:ad:6a:38:42:47:e9:aa:23:99:c2:98:
         9d:57:8f:d7:21:dd:6a:9d:ad:70:d9:af:d4:81:0a:fc:72:c9:
         21:2f:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:27:25 2026 by rpki-client