Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4def63b3-825e-3b72-a6e7-8e5e74b33d51.roa
File:                     4def63b3-825e-3b72-a6e7-8e5e74b33d51.roa (raw, json)
Hash identifier:          +xula2MrHH140nt0VKDxdynxvAp0ob0C978lZGdaxFw=
Subject key identifier:   4C:2D:91:DE:80:5E:94:7C:8E:2E:F7:E9:2F:B0:B5:78:10:20:D2:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62D5667D9A48D992CFCD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4def63b3-825e-3b72-a6e7-8e5e74b33d51.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396592
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d5:66:7d:9a:48:d9:92:cf:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=70140ed8-04d9-461b-ad99-aaec7e61629a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:f8:1c:04:10:8c:03:97:2e:57:bc:24:42:
                    14:09:b7:c8:da:8b:90:80:cd:59:f2:78:6f:d5:a3:
                    bd:cb:7c:9a:53:9d:2e:41:d3:c3:4e:f0:8e:c5:c9:
                    96:42:0e:8f:22:55:bb:54:2b:57:92:7f:fc:38:8c:
                    f1:b3:a6:15:2b:69:6c:2e:52:eb:3f:00:83:0e:83:
                    69:15:ec:c4:7c:11:62:64:d6:06:0d:3d:eb:ea:c4:
                    12:f2:6f:93:a7:eb:a2:eb:22:85:85:14:de:f2:9e:
                    53:5c:c8:0a:5c:aa:a3:df:39:01:c8:4b:f9:cc:8c:
                    74:e6:f0:ca:52:a9:bd:55:a0:19:7f:28:8e:bf:f5:
                    d5:c0:24:b3:5a:70:a4:54:c2:76:f1:d6:02:a9:9b:
                    bd:cc:de:cf:b2:52:ed:f2:36:0b:ce:b6:67:3e:1f:
                    4c:a6:c5:63:18:15:11:42:be:dd:2e:51:87:45:63:
                    37:30:74:c3:47:73:a3:38:bd:a9:fb:04:f6:ab:fa:
                    09:83:c1:b1:34:67:de:39:79:48:50:83:2c:a5:4c:
                    a3:fe:ae:15:b8:c6:56:28:e0:2f:93:7f:51:2c:a1:
                    26:1a:06:2f:21:db:0b:b7:1c:10:b9:b4:a6:08:ae:
                    46:bc:c4:5f:c0:b7:3c:4f:a9:06:ff:97:a3:3e:aa:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2D:91:DE:80:5E:94:7C:8E:2E:F7:E9:2F:B0:B5:78:10:20:D2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4def63b3-825e-3b72-a6e7-8e5e74b33d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:b3:f4:49:64:28:07:9d:91:80:77:b6:75:63:d6:bc:03:
         62:5d:a5:e1:7d:35:7a:1d:0a:69:20:aa:9c:87:f6:97:4d:35:
         7c:90:6d:fe:a2:4a:5d:94:d1:ea:fc:82:9e:bd:1b:0e:34:7c:
         7d:58:12:10:c6:26:fb:35:b1:78:32:c9:45:b3:66:d2:91:65:
         24:5d:60:87:81:84:48:73:4e:96:f9:1e:6c:95:29:1b:c4:dc:
         72:ab:2d:93:27:45:db:8f:9d:92:6b:ad:09:fb:62:1f:4e:0b:
         4f:75:f8:cc:f1:f4:08:31:75:32:cf:b9:5a:b9:82:f2:c1:7e:
         04:97:71:73:c3:e1:4c:a8:c6:cc:66:1a:a7:d4:d8:7f:78:86:
         06:6c:f5:9c:21:b4:b0:8c:ff:38:74:e7:c2:42:3d:fa:53:f9:
         c2:79:e9:19:9d:0e:b1:9c:d8:ce:ea:63:2c:af:1c:51:f0:ab:
         ff:c6:31:8f:0b:cb:2f:c1:b2:9b:68:e0:3c:b1:0e:d3:53:5d:
         d6:69:71:79:ed:6f:f5:60:37:65:9d:40:e9:0c:f0:cc:6b:44:
         96:e7:12:c3:80:ad:d4:bd:15:a3:d8:a3:90:ac:ea:1f:d3:40:
         21:9e:6b:30:d7:cb:dc:ce:83:be:65:1e:d0:a4:fd:98:ff:8b:
         dd:79:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:50:10 2026 by rpki-client