Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df508011-eb15-31af-b641-443ac29b820c.roa
File:                     df508011-eb15-31af-b641-443ac29b820c.roa (raw, json)
Hash identifier:          +2O4jW6wiEs90zWoGk31i+bZC3q3KylWtfL4RQ9fk9g=
Subject key identifier:   45:5D:86:14:DF:00:F5:90:DE:57:36:FE:14:2E:3F:30:00:1C:5E:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F66C2C8F87E6DC80530C3AAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df508011-eb15-31af-b641-443ac29b820c.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     396576
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c8:f8:7e:6d:c8:05:30:c3:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=c1e0741b-e7e0-4fc3-ac43-39fd95f4c77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:2c:f5:61:0c:20:a2:f5:ad:99:8d:5b:49:
                    32:e0:0a:4b:d7:23:c5:59:52:47:d7:c7:cc:73:46:
                    6b:88:2b:c6:75:53:6f:6c:d0:40:1c:95:b2:e9:91:
                    5e:c1:66:7a:2b:a1:5b:d0:62:cb:6f:2e:30:12:3b:
                    92:99:35:38:dd:9a:c7:17:be:c0:d0:49:50:70:48:
                    ae:d9:88:80:d3:85:61:80:18:dc:5e:5a:d0:de:42:
                    5b:34:cf:58:37:b1:d0:fb:c1:df:50:14:e0:9a:1c:
                    20:e9:68:4a:95:c0:90:db:69:f9:70:af:51:70:e3:
                    4d:a1:c6:38:be:52:6c:67:26:cf:64:b3:d0:a3:cc:
                    57:c3:5c:d8:54:7f:88:f4:27:c6:ce:3b:8c:49:17:
                    51:0d:ef:df:ba:db:bb:fd:9d:79:9f:7d:28:a9:35:
                    65:64:33:e3:54:36:68:a4:ca:57:04:e1:71:df:8e:
                    73:28:c2:f3:c1:40:5a:61:48:90:1b:10:02:8d:31:
                    ec:23:63:7d:50:bb:2b:5b:00:fb:1d:0e:46:e4:8a:
                    27:95:8b:b5:3e:0d:35:e7:c2:63:8d:2b:7f:f6:ed:
                    af:7c:fe:11:61:24:e0:95:5a:b4:1b:40:d0:07:06:
                    a1:d4:37:dd:0e:b9:b9:9f:58:46:9d:93:4f:e3:14:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5D:86:14:DF:00:F5:90:DE:57:36:FE:14:2E:3F:30:00:1C:5E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df508011-eb15-31af-b641-443ac29b820c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c0:af:f6:2b:eb:a8:15:17:e2:60:29:8b:40:12:f6:86:fc:
         69:04:dc:1c:66:3e:c3:0f:b2:0f:77:95:c8:7e:2a:f5:9f:ff:
         dc:7e:d7:f4:54:39:cb:dd:2b:89:99:ab:03:ad:9c:07:5a:46:
         76:c0:94:0b:16:ad:ff:0a:8b:3b:ce:cb:fc:0b:fb:64:d8:b0:
         38:d7:3f:66:18:93:8c:7d:f8:d9:94:8e:c0:2d:87:f1:4d:0c:
         fc:25:64:fc:35:4a:9e:74:63:10:6c:dd:0c:8b:4e:1d:79:22:
         e9:85:68:b3:0b:1b:88:e4:96:a4:73:18:19:1a:1a:b8:0e:99:
         f7:2f:db:3b:b9:e4:05:21:db:77:f3:76:67:95:32:a4:45:94:
         b7:f6:7b:3b:44:d2:33:88:ae:78:90:3a:50:48:b5:84:a9:5f:
         af:e9:11:24:2f:2e:6f:54:83:67:46:f6:62:e9:d3:09:35:f6:
         ad:f2:79:fb:b1:13:b2:b0:4e:17:28:b6:89:e1:e1:3f:83:d4:
         34:47:09:a5:2a:63:cd:fd:cf:ac:76:7b:3c:45:16:56:45:5b:
         fd:31:ab:27:8d:f6:1c:06:cb:61:13:97:bf:84:0c:9e:38:1d:
         29:eb:49:45:29:3d:d8:fe:db:25:87:5a:66:1b:65:76:f9:2c:
         9d:88:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:52 2026 by rpki-client