Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1dd16f-0652-3e3f-b9c9-0b79f00b6e8c.roa
File:                     4c1dd16f-0652-3e3f-b9c9-0b79f00b6e8c.roa (raw, json)
Hash identifier:          lr2ZJxpM3+BXzI63zBMIKOR3y8yJQ2uHb5mC4XVXkkQ=
Subject key identifier:   52:CB:2E:D2:11:71:2F:A9:03:D5:2C:21:88:CA:0B:91:F0:D9:21:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F549DAB2A8CE9D9563AE67BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1dd16f-0652-3e3f-b9c9-0b79f00b6e8c.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396549
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ab:2a:8c:e9:d9:56:3a:e6:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=21006dc1-0273-46d1-8ce0-8d1258703cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:50:35:16:40:0a:48:31:78:bf:f9:4b:64:
                    63:c2:d3:10:85:9c:c1:11:85:65:39:32:65:5c:37:
                    69:1d:69:41:4a:3f:40:10:c4:58:42:63:b2:f5:e7:
                    0b:61:78:dd:62:c2:b3:48:82:bd:31:5d:0e:ef:6e:
                    88:05:cd:60:fa:15:31:36:bf:27:ac:1d:d5:ca:3a:
                    c6:75:3c:86:46:30:05:db:3c:a8:05:00:6a:66:54:
                    fb:12:a6:c1:e9:10:fe:aa:d9:1e:9b:15:f8:f7:82:
                    2e:df:e7:4b:0e:8b:72:a1:a4:df:44:11:e9:f8:52:
                    f1:98:bc:f8:3c:51:ba:0d:84:08:f2:ad:1a:85:7a:
                    a7:c2:a4:43:e8:3b:12:dd:de:1f:b9:17:6a:ed:8a:
                    d1:d3:ff:25:5a:09:1f:15:45:d6:7d:20:61:3d:f6:
                    00:82:d7:fd:8c:a8:b4:04:fe:5e:df:f3:1c:12:66:
                    71:58:f5:f8:70:0d:b1:70:50:d3:45:5e:cb:5a:fa:
                    25:ef:ab:9f:96:26:fb:24:1a:18:7b:d6:25:40:f8:
                    09:a8:d2:0d:5a:3a:fc:67:ca:18:0a:d8:af:f4:00:
                    75:aa:e2:03:e0:44:28:5e:30:78:de:91:7a:30:3e:
                    25:f0:86:62:6e:55:dd:70:13:dc:94:b5:19:a6:d4:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CB:2E:D2:11:71:2F:A9:03:D5:2C:21:88:CA:0B:91:F0:D9:21:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1dd16f-0652-3e3f-b9c9-0b79f00b6e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3d:74:1f:1b:88:db:2f:ff:fa:f5:05:51:53:6e:00:6a:3b:
         03:67:da:b8:66:f5:ee:7d:9e:c5:d5:bf:56:68:d2:0f:8c:18:
         03:28:47:bc:f6:e4:dd:09:d7:95:c5:d5:c5:2a:96:8f:78:cc:
         16:9e:58:03:52:95:1f:62:ba:29:93:51:3f:ca:b2:5f:ff:b1:
         f1:3c:8b:8f:97:8b:c5:94:b9:3e:b3:df:cc:1f:54:51:76:7f:
         6c:32:f6:0c:61:bc:0b:f6:f3:95:2b:ae:fc:22:d8:ba:cb:55:
         24:26:fb:6f:3c:72:b7:55:fd:11:95:19:01:a0:58:63:54:b5:
         65:79:55:fe:b9:68:ad:0f:be:5e:07:36:94:02:23:81:4d:a9:
         ff:7b:ac:ce:0f:db:2e:c8:0c:c4:02:97:ac:92:31:fe:29:88:
         8f:60:01:fb:37:d8:3c:86:2a:58:a1:5a:a6:71:8b:a3:25:fb:
         24:26:e2:47:0c:91:3e:37:c9:8b:f9:7c:bf:0f:40:97:a5:7c:
         c1:0b:b2:10:5b:95:37:2c:ad:50:32:e8:79:d4:0a:10:da:42:
         eb:b3:5b:9a:79:01:0a:c9:32:72:bc:69:cc:79:c7:a1:23:3c:
         b5:82:a3:e9:a2:9e:75:87:9e:09:ad:5f:2b:4f:27:a7:ff:df:
         14:43:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:07:18 2026 by rpki-client