Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35687240-109b-31cf-a4fa-3a2b819a7c72.roa
File:                     35687240-109b-31cf-a4fa-3a2b819a7c72.roa (raw, json)
Hash identifier:          l/kL3RfedlRM3ojcJGi/6xp0nLxkDymrmgudJpBSCB8=
Subject key identifier:   5A:A9:71:5B:DB:4C:08:63:0E:C8:DA:4F:8B:41:25:EC:55:D9:98:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F57680F8AF37AB37CA1B72480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35687240-109b-31cf-a4fa-3a2b819a7c72.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     396546
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:0f:8a:f3:7a:b3:7c:a1:b7:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=88e0110f-c96d-4b6b-bb86-0403fdd0625c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:ab:8d:0e:59:e7:fd:52:5e:d3:96:3a:c0:
                    96:71:4d:e8:f4:5f:2b:d8:a6:e7:bc:23:01:66:b5:
                    36:c7:87:c4:86:a0:af:7b:7b:3d:ac:7e:bf:43:9b:
                    84:3e:b4:ed:d5:50:a7:da:7e:d7:c7:02:2e:ee:7f:
                    d2:29:3e:67:cb:9b:b4:ac:d7:ec:2f:47:5a:cb:f9:
                    eb:32:fe:9c:55:42:a3:57:b2:1c:ed:00:41:64:5d:
                    f9:1d:74:cf:5c:fd:80:8a:37:1a:01:da:ab:f9:56:
                    76:1d:16:27:16:4e:e6:5c:bb:b8:84:82:02:bb:fe:
                    b0:07:12:17:a4:48:d8:c6:bb:59:a0:9f:d5:a1:3f:
                    b4:84:8a:97:fc:f6:d1:c4:8f:4d:99:0c:ea:98:4e:
                    88:7b:8a:c7:45:2e:0b:69:58:9e:a4:a3:e5:03:81:
                    bb:3c:ca:05:0f:3b:0f:a3:f8:5f:50:a9:e8:4d:0a:
                    15:9b:98:04:ae:ec:cd:b3:b8:67:1d:40:c8:07:3d:
                    e9:3f:a5:cd:ca:cb:a2:e6:1a:c9:ce:bb:64:61:43:
                    73:8b:d8:1a:63:3b:fa:7a:e3:db:fc:5e:ab:a2:0d:
                    d5:9a:c8:8b:d8:d4:0a:33:73:a5:27:92:6f:0f:45:
                    d0:93:2d:ad:af:7a:8b:a1:ac:c8:97:33:8a:7b:95:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:71:5B:DB:4C:08:63:0E:C8:DA:4F:8B:41:25:EC:55:D9:98:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35687240-109b-31cf-a4fa-3a2b819a7c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:c2:4d:8b:33:2a:8e:1a:71:42:bf:98:31:13:38:62:26:
         d0:97:d3:35:7a:59:68:16:e4:ad:8d:cb:3a:8d:af:db:1d:7d:
         c1:f8:74:d0:c2:7d:7f:36:8a:b2:5d:1c:fb:4f:65:b1:73:04:
         99:d1:39:5c:7f:11:c0:19:33:65:7e:d6:f3:3e:4c:3e:dc:ac:
         53:e7:5c:07:79:41:55:b4:dc:e8:3a:4c:d0:99:c2:de:bd:72:
         c2:ae:ce:36:07:d4:4d:74:c3:3b:a1:11:28:3e:2c:23:ff:8f:
         7b:57:56:d1:96:94:e8:7c:4e:81:a6:c9:3c:a4:88:10:8a:ce:
         aa:e1:57:7f:a0:cc:da:39:32:bc:b8:b4:c7:e4:ea:c5:f7:7f:
         79:0a:81:f8:44:aa:90:90:71:77:a7:c6:65:16:d4:d7:bb:71:
         c5:57:40:9a:54:e7:97:15:0e:35:bd:ad:ee:f3:fb:b4:7d:59:
         0a:43:ac:8d:fc:cf:68:42:89:81:47:fe:ab:e3:12:57:fb:e0:
         5d:bb:94:db:02:8a:26:c7:16:83:e8:75:0b:93:f2:d4:79:85:
         8c:e5:d8:7b:e2:ce:6a:7d:e4:42:8f:80:dd:32:f4:ec:e2:6a:
         da:53:5d:f2:b8:2f:c6:13:c6:f6:42:8b:b8:a6:69:fd:bb:d6:
         95:06:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:15:10 2026 by rpki-client