Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa
File:                     9ffa16d3-2d08-3707-98b5-07d9e1313429.roa (raw, json)
Hash identifier:          1gJ25fsxW+iuqIFQwMuHo/2eFS8+c6J6SqVvFXWwMJ4=
Subject key identifier:   67:13:9E:C8:4C:11:30:06:59:9E:9C:35:28:BE:AF:3A:7C:9D:A4:42
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584EC20C69C28A8A71191C49CB40
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     15116
IP address blocks:        2001:49d0:180::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:69:c2:8a:8a:71:19:1c:49:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=a0e19a61-177e-42c5-a351-5362fb476fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:52:53:a8:cb:f7:59:40:aa:68:ee:b8:8f:
                    3a:25:60:cb:6c:14:e0:93:a1:42:a4:fd:a5:1b:ca:
                    3d:b9:a7:27:55:fa:2f:02:7a:43:df:fe:60:82:06:
                    ab:d4:59:91:68:93:30:e6:e9:ba:7e:14:77:aa:cb:
                    28:03:b5:ed:f8:04:ec:2b:a7:70:c8:25:72:4c:1d:
                    06:fe:b8:4c:9e:3b:5a:4a:d2:2a:06:50:17:3b:cc:
                    19:9a:84:9b:41:67:07:7a:b3:11:22:33:2f:0f:af:
                    ac:56:4e:2a:6f:32:c9:60:9c:d1:e7:40:99:41:85:
                    28:93:3a:e4:7f:97:4c:c1:04:bc:6c:a6:e3:b7:4c:
                    0a:a8:cd:18:0f:c1:3b:21:a6:08:6c:70:64:cb:0f:
                    20:aa:9e:76:00:04:fa:f1:98:1f:75:37:1c:99:66:
                    15:14:2a:d9:fd:40:7b:30:8a:b7:bc:e2:32:cb:58:
                    51:23:5c:13:d0:d7:e2:e7:42:eb:19:e0:bb:21:c5:
                    7c:cf:05:93:4e:0d:4e:e6:4a:71:38:c0:c3:be:41:
                    bd:9d:47:bf:f3:f3:4f:2f:ac:69:f8:c0:7a:ef:94:
                    7e:18:e5:19:d5:7d:e5:c3:f3:1b:48:fc:a2:ea:47:
                    5b:f0:ae:61:bf:54:64:b7:44:ac:b1:b7:e1:e8:01:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:13:9E:C8:4C:11:30:06:59:9E:9C:35:28:BE:AF:3A:7C:9D:A4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:180::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:92:0e:a2:3d:88:bb:f8:84:b8:86:14:70:88:80:12:a8:1d:
         4c:59:e2:44:5f:81:67:f4:9f:48:7a:ae:69:34:11:8f:29:73:
         4e:3e:3b:71:1c:4d:0b:10:15:05:3b:48:d5:88:7a:bf:07:67:
         e9:61:b1:f2:2e:6e:a7:6a:03:dc:b0:4b:ab:ad:97:c5:10:3a:
         1f:74:e3:59:f9:50:dc:cb:51:03:3c:33:2d:32:e3:0a:3e:64:
         63:4e:c0:5e:24:8a:a6:9a:08:f4:6d:88:2e:99:ca:ba:ab:f6:
         b1:f8:37:2f:c4:c0:8b:84:36:1a:3a:37:b5:d7:ba:99:9b:37:
         a5:7e:92:88:38:d9:16:c8:9b:5a:c3:34:a8:15:65:18:da:ff:
         e7:e3:31:f6:cd:e0:0d:f1:1c:ff:a2:07:97:12:7d:e6:e0:b8:
         83:4d:c9:be:cd:64:01:02:57:0d:81:8d:94:2e:f1:bb:f6:1f:
         ca:70:aa:ca:f7:10:0a:c8:94:ef:38:f7:18:fd:1b:12:17:03:
         f9:22:c7:27:8a:37:af:9d:3b:51:a6:7d:78:c3:79:7c:7b:51:
         07:51:9d:29:49:a2:88:6e:02:34:ae:47:fd:77:73:d1:12:69:
         76:e4:5f:47:30:3e:f4:74:ca:95:1c:8e:7f:0c:92:b6:73:0f:
         a3:34:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:22:38 2026 by rpki-client