Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa
File:                     ce315f21-7bdf-316e-b88e-2c740cdf6096.roa (raw, json)
Hash identifier:          9ArHuFaQ89mQtQzeboPEZxyJi9yq4aNSmAWbPPfsRRo=
Subject key identifier:   2D:15:FE:A1:92:B1:ED:DF:BD:E5:85:2C:D2:9F:15:7D:EB:73:62:80
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F4973ECB6E0B759F852D7F200
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     104
IP address blocks:        2001:468:501::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ec:b6:e0:b7:59:f8:52:d7:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bdd8b59a-bbb8-4395-b8e4-4efc917bdd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:50:6f:f6:d9:aa:59:38:eb:98:f0:4b:24:
                    fe:3d:0e:68:5d:32:e3:c4:d1:a5:64:f1:1f:3c:67:
                    f4:bb:b1:24:fc:91:c8:25:f3:92:cd:86:b6:85:3c:
                    3d:d2:49:a9:94:b1:66:f7:00:94:2e:6a:86:e9:9d:
                    52:1d:f1:2c:b2:83:92:ba:ef:da:c0:58:93:04:d9:
                    e3:a1:4e:ea:9a:c2:75:a9:28:18:fe:2e:b2:f2:b9:
                    28:fe:f8:15:3c:24:be:5e:cd:7f:b5:d0:4e:c8:ae:
                    86:d5:2a:08:30:6a:cb:69:e7:0d:e2:05:db:dc:f8:
                    dc:ef:dd:4f:43:3f:2d:9c:b9:89:6f:31:a6:b6:bf:
                    7b:81:eb:97:d0:a5:d9:d6:a3:83:37:ea:bc:ae:d6:
                    a3:e1:00:60:00:a3:8c:45:cb:1e:28:a7:a9:fb:e0:
                    a4:c3:f5:78:52:6f:1b:3d:8f:cd:18:0a:f4:71:c5:
                    06:63:16:9f:c2:4c:39:43:02:a8:d1:39:42:94:6b:
                    3e:a9:9c:e9:47:39:2c:d7:23:f0:bc:51:ef:c3:ca:
                    65:8e:1f:c8:3b:db:80:90:42:18:ce:6e:3e:aa:e2:
                    93:1a:c9:aa:ab:86:88:03:2c:ad:df:6b:f9:35:4f:
                    dd:d1:1b:e5:77:34:2e:30:57:83:1f:5f:4d:1c:39:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:15:FE:A1:92:B1:ED:DF:BD:E5:85:2C:D2:9F:15:7D:EB:73:62:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:501::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f5:72:ce:c2:d6:d1:87:43:f6:95:49:30:dd:f0:c0:ed:fa:
         ee:9f:2a:25:90:5b:a1:f4:8e:8c:63:c5:0b:fa:10:6d:bb:ba:
         4c:29:5d:9a:15:f7:c6:8b:b0:66:46:0a:f2:32:4c:07:34:57:
         6f:a4:50:ce:8a:51:2e:50:b1:d0:0c:0d:2b:bd:e1:55:2e:cd:
         6e:88:a1:32:ff:43:b1:90:b5:07:45:0b:d5:88:27:8e:c0:fc:
         a3:91:f1:79:cf:f7:8f:65:ec:43:14:91:6d:d3:ca:b7:92:c5:
         37:96:e2:c6:8e:6d:d4:ac:ec:8d:5a:92:62:f0:74:6d:7d:14:
         a3:02:15:f8:ff:e2:ac:ee:5f:bc:7a:10:7f:4d:f4:85:62:ba:
         c4:e1:2d:62:0f:e4:28:c2:d0:50:72:b8:52:53:01:c7:0b:b9:
         33:e6:c4:31:eb:b6:1d:20:a4:cb:ee:b5:0f:ba:ec:c1:ac:6c:
         fb:fa:34:4e:c6:2a:79:ac:5e:67:34:94:04:81:e4:90:42:f0:
         38:4f:67:5f:63:6d:b4:4b:83:fe:60:63:ab:2b:19:ff:65:87:
         45:16:a4:39:d5:8a:a3:5b:9d:0e:1f:91:33:b9:d4:42:51:57:
         95:85:b1:c4:d4:2f:58:93:82:53:d1:b6:b5:28:40:4d:14:e7:
         7b:fc:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:56:14 2026 by rpki-client