Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80713458-d59d-3ad3-a3db-1265273c888c.roa
File:                     80713458-d59d-3ad3-a3db-1265273c888c.roa (raw, json)
Hash identifier:          zezQfhcO8KQDUz/AxVrmZXytm6FWmml6H9OOOfHmG9s=
Subject key identifier:   7B:4D:53:1F:CB:D4:A2:DD:F2:92:1C:62:17:79:85:02:E8:C6:5F:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2ABD0A6F3BFE6C5F61F8BD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80713458-d59d-3ad3-a3db-1265273c888c.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     396549
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:0a:6f:3b:fe:6c:5f:61:f8:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=940ecd21-5015-4674-87ac-ea48285edc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:6b:65:f0:a1:48:19:ad:dd:64:71:78:dd:
                    b5:38:db:98:a4:20:57:87:19:8c:7e:33:55:de:7c:
                    e6:83:7d:ab:20:e2:b3:5a:5b:d8:af:80:29:35:0a:
                    15:97:15:3b:29:be:af:6a:6b:f1:1b:f0:b5:cc:13:
                    6f:c2:56:fd:b9:00:77:e5:89:aa:e8:96:5c:2b:c2:
                    29:a0:d8:c7:66:7b:5d:49:16:ea:fb:2b:54:ec:56:
                    92:6f:59:5e:c2:ab:a2:e3:8b:64:03:58:20:1a:6a:
                    86:79:df:25:5b:5e:81:21:64:46:d7:e9:d0:e8:d7:
                    d6:f6:5c:70:8b:f8:92:5f:69:e6:87:c4:31:c3:dd:
                    ef:0b:f5:2e:e7:e0:fd:8f:3f:56:e6:bb:d7:5c:98:
                    89:a3:55:65:22:70:f0:0e:a0:0e:bc:e9:66:ef:54:
                    be:c6:30:7f:8d:31:fd:a6:97:be:32:91:34:17:ed:
                    13:f9:26:a8:14:79:8c:d5:59:c9:d7:38:ed:83:18:
                    e1:0f:bb:23:9c:26:a7:64:b6:82:b1:3c:d5:61:1b:
                    bd:33:6a:ea:b7:de:85:7f:3f:c8:ac:90:c7:a6:12:
                    a7:1b:a0:a0:25:86:32:b4:ff:b1:48:a9:2e:0a:06:
                    dc:32:ea:ac:2f:ec:dc:59:da:01:cd:7e:02:0d:04:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4D:53:1F:CB:D4:A2:DD:F2:92:1C:62:17:79:85:02:E8:C6:5F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80713458-d59d-3ad3-a3db-1265273c888c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:4c:04:c7:ec:08:77:b2:6b:ae:a2:45:03:16:fd:cb:24:
         58:9c:40:5d:e9:79:56:8b:04:d3:e3:ef:1e:2a:52:e9:c0:7f:
         33:53:75:f2:64:ef:fc:14:37:87:68:e6:27:21:71:33:4a:90:
         ef:fb:bf:3b:61:44:63:9f:4e:3e:f7:0b:0e:12:5d:0f:8d:3b:
         ba:cb:15:3a:5b:f8:a0:da:44:0d:41:04:a4:74:84:67:74:30:
         93:10:1f:bc:93:cd:b5:eb:ca:f1:20:e3:61:45:1d:8f:84:9a:
         75:e6:a0:5d:1a:c2:1a:57:b2:9f:a9:bc:a4:b4:7b:52:3e:c4:
         38:8b:76:1e:c6:f9:7d:08:ef:b6:1e:45:77:49:cf:e1:a6:c4:
         38:28:d4:e7:cb:2d:71:be:05:23:46:dd:50:f5:73:76:f0:33:
         22:54:fd:ed:26:e4:29:1b:b9:d2:3e:0f:ed:7c:55:36:db:f2:
         a5:6c:82:8a:01:f1:8e:20:c2:15:d0:eb:65:a1:89:02:40:7a:
         41:e4:0d:b6:3c:33:42:10:aa:a8:01:7d:66:0f:fa:f6:78:56:
         23:6b:e4:b9:53:eb:f2:19:d6:5b:73:2d:74:83:f1:70:0b:74:
         3c:c7:42:7c:14:46:69:78:d1:ec:f7:08:28:91:40:45:1b:4a:
         45:3f:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:43:28 2026 by rpki-client