Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8da8d589-465d-358e-bab7-19e6e79a46bc.roa
File:                     8da8d589-465d-358e-bab7-19e6e79a46bc.roa (raw, json)
Hash identifier:          yn7CP0Qee+8StEhoLmbuy4WfwyQYo80Kd3qcEuNrUOE=
Subject key identifier:   0E:44:F4:8E:77:2B:DE:5F:10:49:4B:6A:7F:CD:43:0E:2B:4D:BA:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F57682EFF4A610C82D07AAB90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8da8d589-465d-358e-bab7-19e6e79a46bc.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     396551
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2e:ff:4a:61:0c:82:d0:7a:ab:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=d984a0a7-4223-44f1-bcdb-c2a6d901ec3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:59:b9:fd:7c:c8:0b:e7:8f:31:b0:d8:10:
                    62:c5:5a:b1:db:53:ee:2c:81:ac:f2:32:b2:a6:d7:
                    10:e7:88:da:ac:d8:c8:de:49:ad:96:58:a1:22:4a:
                    78:48:c9:b0:fc:b3:92:15:22:ff:b9:64:db:aa:58:
                    12:58:71:5f:4c:b8:31:78:2d:e5:56:3a:9b:b5:64:
                    0c:e0:c5:be:7d:aa:62:c5:25:c4:d4:5a:cc:16:d2:
                    56:d9:62:52:8b:8f:19:08:b6:88:0b:b4:72:26:4e:
                    91:32:cd:7d:d5:24:a9:1e:81:57:43:37:99:2e:64:
                    f0:8c:41:40:da:0c:26:22:ec:a5:40:69:63:50:b2:
                    08:30:46:8d:bf:5a:f5:e6:aa:92:c7:53:00:e5:00:
                    64:06:d6:25:57:68:b0:6e:f3:ca:fb:03:8d:e5:41:
                    06:bb:9a:60:9e:36:2b:7c:34:da:bc:d2:ae:2a:be:
                    64:06:1e:1e:44:60:56:12:aa:65:d0:d1:ce:9c:34:
                    e6:1e:ec:f2:a4:67:33:29:8b:ae:ec:e3:a0:f6:83:
                    99:b4:68:95:db:65:62:be:2e:f2:b6:54:fa:7a:e3:
                    e0:a3:2c:14:08:05:38:6e:ca:91:b6:69:ee:e8:ba:
                    fb:cc:d0:54:e9:94:83:cc:fb:3a:3a:c4:ba:67:22:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:44:F4:8E:77:2B:DE:5F:10:49:4B:6A:7F:CD:43:0E:2B:4D:BA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8da8d589-465d-358e-bab7-19e6e79a46bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:2b:fa:af:14:79:05:4f:c1:42:06:f2:eb:b8:a6:31:e7:
         66:e9:cc:d0:8a:ac:5c:91:a1:60:29:79:41:ac:b1:7b:00:36:
         f5:b5:dd:1e:ca:30:87:3c:b0:0d:6b:6f:c7:a5:e2:8d:9f:89:
         c7:b8:ce:63:a4:20:d9:41:71:a6:b8:53:bc:77:9e:3c:3d:eb:
         64:f3:5b:e5:a8:07:81:3b:4a:ec:a8:a7:0a:cd:43:8e:ef:d1:
         7e:c3:2c:9b:3d:97:bc:e3:4b:87:e5:02:3e:89:f1:69:e9:67:
         1c:6b:94:b0:36:54:d5:07:01:7b:41:dc:46:03:0a:40:64:59:
         91:40:49:d5:10:31:b4:36:75:b5:8b:36:53:4b:db:de:dd:80:
         e3:8f:ad:71:fc:68:f3:c1:c6:85:07:b0:31:31:82:7b:a4:c1:
         48:51:df:aa:ca:5a:f2:86:4b:7a:73:ee:5c:2d:64:ed:cf:4f:
         53:bf:0b:27:8e:e6:7f:f6:ba:55:da:95:8d:95:26:a3:31:c7:
         ea:5a:b1:1c:2b:37:11:5a:e1:34:6f:d6:69:a1:09:be:99:8e:
         e8:d4:93:8e:c9:5f:be:d3:7c:15:60:47:1f:bd:a4:3c:96:49:
         42:03:14:aa:27:2f:cd:a6:aa:2f:84:23:84:eb:90:02:bd:5b:
         43:9f:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 07:48:44 2026 by rpki-client