Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/657f4e52-d18a-31c3-a83a-299192cabbc4.roa
File:                     657f4e52-d18a-31c3-a83a-299192cabbc4.roa (raw, json)
Hash identifier:          kUIQzC1AM383iXxQkpv0wm/VUsAeQTKkVjdDVNaLBhY=
Subject key identifier:   00:DB:57:03:2A:52:8B:6B:31:33:E7:F8:EB:87:79:5A:4F:EF:91:B8
Certificate issuer:       /CN=111c4633-f730-480a-8516-3382e9a5eda3
Certificate serial:       010D0C9F4328584F3A17DABE3C83A8837DDC3D80
Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/657f4e52-d18a-31c3-a83a-299192cabbc4.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     13538
IP address blocks:        2001:504:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:da:be:3c:83:a8:83:7d:dc:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=cb0ee1f2-e8b0-4863-86fe-5e02bea0536d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:8a:31:94:e7:20:83:d6:a2:8f:ce:b6:f8:
                    f5:f0:58:b9:5f:06:60:a5:0e:f9:2d:95:49:bb:3e:
                    9d:34:30:bf:e9:b5:e8:d7:ec:a5:86:f3:d8:c5:f8:
                    ac:ed:c2:08:08:e5:b6:a6:90:0a:57:5f:17:cd:a8:
                    cd:67:38:38:e0:41:db:3d:87:d0:9d:7c:ab:85:b1:
                    a3:c0:e8:27:9d:43:01:17:53:bb:f2:a0:68:52:0a:
                    c8:52:99:44:44:d7:8c:1c:dd:e1:13:d2:e7:ea:b7:
                    45:28:47:0b:bd:61:45:c1:11:af:26:e2:f2:f0:ea:
                    3a:5b:94:d0:10:54:b2:18:9a:7d:15:36:80:c5:54:
                    46:26:f2:4d:1b:79:c2:7e:11:7a:5b:c5:9c:a2:8f:
                    75:21:7b:15:e7:5f:d6:e6:7d:f7:12:3e:25:1e:57:
                    85:67:21:34:34:1d:1e:f1:d0:66:f3:25:51:31:9b:
                    ad:c0:f0:a1:9d:85:f5:da:08:4c:0f:29:19:e6:cb:
                    3f:12:c5:22:cd:36:2e:20:21:c9:ec:74:35:2b:9d:
                    85:27:fe:38:8b:1d:c9:a9:8e:68:4b:4d:46:6c:05:
                    6d:36:e7:12:56:7a:cc:af:ce:33:88:70:df:76:01:
                    b9:08:8b:71:f3:99:1b:2f:c0:27:9b:bd:6a:45:00:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DB:57:03:2A:52:8B:6B:31:33:E7:F8:EB:87:79:5A:4F:EF:91:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/657f4e52-d18a-31c3-a83a-299192cabbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:66:26:a4:8e:a4:fe:9d:5f:3e:bc:1d:ef:9b:cc:9e:60:32:
         17:52:df:90:d8:97:91:4c:d5:23:15:e0:b8:ae:dd:e6:c2:c5:
         8b:ef:23:44:c7:a8:7f:7c:f1:ff:2f:74:f2:da:fe:dd:bf:05:
         14:a4:c3:2d:36:8b:3d:44:0d:e1:cb:58:e6:19:61:50:e4:82:
         02:1f:43:85:f5:19:93:f6:2c:ad:9f:9f:3f:51:70:a5:e3:0f:
         41:e1:e1:64:1b:9b:32:f5:c6:9d:23:df:66:9f:98:dc:af:c4:
         ad:d3:95:7c:b7:f7:e1:f7:8a:2d:66:35:96:9d:60:b1:78:08:
         34:1e:a8:8d:c4:da:80:89:07:18:3d:c9:af:ca:21:24:89:ab:
         19:e8:b3:ab:b3:b8:ca:9c:19:e4:a6:0d:81:d6:36:16:37:56:
         27:27:1f:df:c1:d1:30:1d:77:29:be:9a:ec:41:ee:8a:f0:fe:
         fd:6d:03:4c:3a:de:a5:70:dc:be:db:ef:0b:71:93:de:a6:1e:
         6f:e4:76:b4:4b:17:42:2e:d5:ab:95:86:97:02:bf:2e:5f:6d:
         0e:7c:82:7e:41:ab:11:04:8b:f3:6d:7e:00:7d:13:28:41:a2:
         4a:04:50:9f:20:bf:07:3e:79:10:83:5b:a0:c2:fb:a7:9b:66:
         d9:83:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:50:57 2026 by rpki-client