Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/169c6c2e-ce2c-3c5b-90bd-43daee666188.roa
File:                     169c6c2e-ce2c-3c5b-90bd-43daee666188.roa (raw, json)
Hash identifier:          lVgncZ0Yx9I9bqGCN+YhrOSdtM+uEbvpTIUqAG6covo=
Subject key identifier:   8E:11:C5:60:A2:B1:6D:C7:52:50:7C:DF:F2:35:6C:7E:8C:7E:5F:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498BDC0BFE1D0E2A2DF00BA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/169c6c2e-ce2c-3c5b-90bd-43daee666188.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396589
IP address blocks:        2001:503:d414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:dc:0b:fe:1d:0e:2a:2d:f0:0b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=38f044aa-1e8d-4807-8bf0-d0aa5740fcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3d:12:cb:7c:74:34:58:dc:1c:98:ae:a4:71:
                    df:88:1c:16:fe:08:e0:9d:a9:11:a8:2a:d2:82:b9:
                    d8:0d:e7:4c:35:0f:a2:1a:b7:56:e5:3f:4a:4e:7d:
                    f8:ef:28:34:8e:01:e3:e9:61:d5:ce:f5:ac:89:ab:
                    19:3d:2f:7d:94:81:7e:26:61:f6:81:bf:1e:93:d6:
                    95:bf:a0:60:3d:f1:56:c5:54:49:38:01:1a:93:50:
                    1d:51:7b:59:7b:52:f8:d7:6e:f2:90:3a:16:0c:6f:
                    ae:0e:b8:9f:f9:02:d1:5d:d3:12:15:3a:2d:59:35:
                    5b:53:12:ff:a2:ce:d2:5b:c8:e1:75:b6:7e:33:7c:
                    8d:7c:a7:f7:47:86:92:e5:89:e0:5b:68:51:10:27:
                    0e:2c:3d:cb:7e:c4:a1:18:df:1c:32:7a:9c:59:99:
                    68:cc:f9:cd:9a:8d:8b:05:fb:38:60:37:df:03:25:
                    22:8c:2b:32:77:03:52:96:3a:a0:0e:f1:0d:8c:52:
                    ab:1c:80:c0:d2:ac:1b:a8:ed:14:6a:eb:39:e6:ad:
                    6f:6f:12:dd:8f:31:51:ad:2a:0f:bc:91:9e:e7:d0:
                    3a:45:d9:cb:02:a9:a9:f7:92:59:ad:60:54:f2:57:
                    36:ca:60:bb:b8:84:96:af:b7:f7:c6:bd:a8:1f:77:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:11:C5:60:A2:B1:6D:C7:52:50:7C:DF:F2:35:6C:7E:8C:7E:5F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/169c6c2e-ce2c-3c5b-90bd-43daee666188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:74:d2:04:f3:b8:04:78:41:58:bd:9c:a3:70:4c:5f:c3:
         00:29:a2:2b:49:12:9e:56:af:88:5f:24:36:6e:88:24:4d:c1:
         8d:c7:4d:00:da:ca:c5:f5:6b:f1:ca:9b:d4:85:f5:28:8b:d9:
         84:94:44:cf:ce:f1:ec:ad:fa:82:ce:2c:b6:20:be:08:9b:05:
         3d:2f:c2:4a:10:81:cd:d1:45:f3:a1:7b:7b:eb:bd:93:f8:95:
         42:cc:c7:da:cb:31:dd:49:4c:6a:e7:8d:50:c2:d6:64:72:b4:
         f1:7c:09:9e:bf:c6:29:1e:d5:f4:99:eb:8a:90:4c:23:18:fd:
         1b:12:d5:7d:13:37:60:a6:92:72:20:40:f9:54:89:c0:e3:f8:
         ac:0c:7e:a9:63:26:84:1e:ee:57:4d:cb:e6:a1:72:ed:a1:dd:
         79:9a:1b:9f:de:da:59:ed:23:ef:cb:8b:dc:08:f4:65:43:fa:
         aa:8f:14:ce:70:79:cf:57:b5:27:5e:76:0b:ec:17:0a:ab:3b:
         c1:33:01:9d:c0:f6:12:ed:93:db:1e:2a:8c:23:4e:82:75:7b:
         5d:41:a1:92:17:d8:1f:34:2c:94:07:6d:17:ee:9c:1b:75:fc:
         db:70:7a:be:54:7d:4a:9b:6f:df:c3:2f:eb:f6:0f:f0:7c:bd:
         f8:3a:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:33:53 2026 by rpki-client