Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9630942e-dae7-33e0-b388-c56a7ecd7562.roa
File:                     9630942e-dae7-33e0-b388-c56a7ecd7562.roa (raw, json)
Hash identifier:          zpzPP2frUFFhPRNfrG8ews85RxgxamgY1cKrbfU0QEM=
Subject key identifier:   A9:19:B2:8E:F1:CB:72:4F:85:A5:B1:EC:E8:7C:B3:04:E5:BD:86:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE2274DB5D299EC657A830580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9630942e-dae7-33e0-b388-c56a7ecd7562.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     396551
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4d:b5:d2:99:ec:65:7a:83:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=3602b24c-c7cd-4742-80f5-025f47ed3597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d3:5b:d9:68:2a:af:8a:8d:f6:a5:c8:f8:0f:
                    7d:0a:6d:57:01:22:36:e9:0e:8d:98:5c:f1:84:d7:
                    68:59:eb:ee:7f:b2:b2:db:da:5d:34:ed:83:69:78:
                    3d:92:05:48:aa:0f:63:c5:1b:2a:b4:f3:c2:16:84:
                    c0:5e:bd:8f:97:2e:1a:4b:d8:5e:83:d6:90:84:ee:
                    6d:d4:7e:58:3b:cb:76:23:ef:59:ab:45:cc:00:d5:
                    cd:b4:6d:27:57:91:f5:7a:5a:a5:f0:ed:98:3d:41:
                    98:57:e9:ab:30:ce:dc:0b:0f:90:2c:9e:a8:be:e4:
                    f4:68:ef:8f:71:17:ae:a8:d3:95:e0:34:9e:5f:6f:
                    6e:1c:55:aa:8c:15:4e:6b:c6:cf:a8:af:6b:8e:5f:
                    95:ac:67:cf:88:e6:08:54:b3:06:63:1c:07:af:30:
                    7e:6a:66:a3:90:71:c0:ef:7d:42:7e:24:b9:0a:ce:
                    0f:5a:0d:9b:50:a9:c2:f3:65:d3:32:12:1b:f0:66:
                    b4:9e:da:25:f8:d1:10:7b:22:42:bf:7b:ac:fb:32:
                    91:1c:cd:16:f2:ef:66:b3:02:cb:44:17:95:5d:06:
                    5b:e5:e0:97:59:32:d6:a5:69:32:c1:ae:97:7a:0c:
                    70:00:08:61:99:b1:74:47:f1:f9:86:34:e3:c1:ee:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:19:B2:8E:F1:CB:72:4F:85:A5:B1:EC:E8:7C:B3:04:E5:BD:86:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9630942e-dae7-33e0-b388-c56a7ecd7562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:d1:a2:f7:c6:3f:b2:5e:d4:2a:72:90:d5:bc:67:f1:dc:
         b0:57:95:ce:ea:02:07:da:fc:7a:89:a2:97:94:8e:ad:61:98:
         5a:45:ab:54:1e:da:f5:fa:39:e0:2b:d6:b4:ce:7e:b5:36:f7:
         a7:4b:49:0c:de:ee:7c:db:63:63:38:cd:a2:be:1b:95:af:1a:
         c9:3c:ce:8b:79:e0:63:b2:22:33:6e:2e:c0:f4:c8:bc:06:fc:
         5e:2c:ad:43:60:7f:d2:1b:d8:55:e3:6c:fd:f6:69:3c:a6:89:
         89:d8:73:aa:b1:c2:ba:05:b9:46:52:b8:02:ad:74:8f:90:a4:
         37:4b:d9:a6:ad:62:4d:4f:26:67:29:5a:fa:e5:e3:c3:97:71:
         65:4a:53:7b:dc:de:2a:09:af:94:88:8e:9a:71:d5:c1:5e:ed:
         0a:5c:6a:fa:ab:6e:03:8d:b3:92:1a:45:51:17:05:37:1b:47:
         aa:d9:a6:44:f1:a1:43:f8:b7:a2:bf:c7:0f:4a:6d:4c:cd:c6:
         13:95:f3:d5:94:f6:cd:58:16:26:68:d8:10:ad:e0:f8:d2:44:
         3e:27:d7:df:34:be:2c:39:89:8e:a9:e8:ad:71:9f:a5:e0:de:
         cf:da:fd:65:9c:c9:7a:13:68:31:a2:c5:42:80:42:04:2b:47:
         b1:98:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:43:28 2026 by rpki-client