Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa
File:                     786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa (raw, json)
Hash identifier:          fot2Zt4/1MMOv/I5NJfzR09JrbJNvoplY27y3byifI0=
Subject key identifier:   A7:C6:93:B2:9F:53:47:5A:6C:CE:D8:8C:4B:98:55:7F:12:24:3A:24
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584EC20C699D2421F31E12460C00
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     2495
IP address blocks:        2001:49d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:69:9d:24:21:f3:1e:12:46:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=b54b8cc9-07d9-4ea8-b00f-d84856a2df2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:f4:28:69:d2:79:fd:3c:ed:fd:71:61:ff:
                    5a:a1:27:13:6e:d1:de:79:85:fc:4a:48:fa:47:07:
                    ea:ad:f1:f9:91:40:cb:dd:f4:38:01:55:ce:e1:ac:
                    8c:63:02:bc:87:9e:9f:3a:7e:48:98:f0:6d:19:d4:
                    56:1b:e0:24:01:0a:00:d0:cd:a6:84:08:38:3a:70:
                    6b:b4:3e:4d:95:36:d8:e3:e3:d4:6f:b9:50:a2:6a:
                    95:5a:4f:01:ee:1d:d4:f8:e5:33:c9:49:46:bf:f5:
                    00:8a:46:a1:eb:4f:98:2d:c9:b8:0f:5f:e0:f9:25:
                    4d:5a:a3:14:e4:ca:62:ed:b0:c8:f0:ea:a8:69:f1:
                    bb:9a:76:47:34:37:24:6f:b9:1f:c5:b0:e8:b0:f4:
                    a8:7c:96:e1:f2:18:ee:3f:38:66:72:ef:c0:5e:d5:
                    e4:82:dd:31:c7:db:02:ac:7b:c6:c7:1a:aa:5c:42:
                    be:dc:e3:11:a2:e5:43:c9:45:a6:c1:d6:40:ef:95:
                    ee:35:1f:6b:13:eb:fb:15:59:54:85:7f:35:5b:56:
                    37:18:c3:2d:fb:38:50:c0:bc:70:26:c6:19:f2:7c:
                    14:46:98:b8:49:60:96:f3:53:c4:67:56:b5:eb:c2:
                    3e:b7:dc:81:ee:4a:21:bb:eb:6f:85:4a:ba:18:54:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C6:93:B2:9F:53:47:5A:6C:CE:D8:8C:4B:98:55:7F:12:24:3A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:a0:f6:cd:6a:c4:c6:1d:7b:74:17:0a:e7:0d:1f:45:d8:
         dc:5c:bf:66:55:2d:ab:ee:0f:39:a8:e6:9a:3c:ad:9d:51:bb:
         cd:59:cf:06:d5:44:a2:04:40:f9:a0:28:c2:9b:8a:ac:97:ab:
         c0:1c:f3:d1:cb:76:30:64:0f:42:a3:12:03:05:a7:21:20:39:
         35:25:c9:d7:bc:1a:fa:1a:75:e8:ed:4f:4a:8b:9d:31:b7:ae:
         70:a7:c9:36:14:f9:53:97:5e:9c:e5:d6:d5:a5:c9:87:5a:10:
         b6:33:32:a1:8d:e8:6b:9a:90:e7:d2:1b:df:21:fc:44:5a:aa:
         31:5a:f0:1b:25:15:23:7a:23:7c:dc:3e:0f:89:d6:2c:c3:fb:
         cd:08:64:3a:5e:1b:7e:41:92:f7:2d:23:92:3e:97:04:8e:64:
         5a:34:41:62:d8:50:db:26:d5:9c:fc:38:1f:78:76:ad:e1:db:
         94:c7:51:53:57:65:48:aa:bf:7d:65:4a:76:13:57:0f:22:a5:
         8d:b1:01:76:45:95:74:70:b8:5c:92:96:fc:b4:07:63:6a:80:
         19:68:60:1c:84:21:0b:04:f9:12:f6:a1:d8:62:57:be:37:40:
         38:0e:e4:75:01:37:19:72:85:69:5a:e0:8f:8b:6a:62:91:7c:
         50:79:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:56:25 2026 by rpki-client