Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e0414-e534-3b15-a2e4-e11bf08d2993.roa
File:                     c07e0414-e534-3b15-a2e4-e11bf08d2993.roa (raw, json)
Hash identifier:          Z/8n5qQ1dELWmTqC+b0sDq+2LneK9bgCdg28V8sdN0I=
Subject key identifier:   89:2F:DD:21:2E:DF:80:EC:02:D0:64:D1:B9:8A:FD:54:0E:7C:25:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49863AC7BAAD374B9C617180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e0414-e534-3b15-a2e4-e11bf08d2993.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396552
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:3a:c7:ba:ad:37:4b:9c:61:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d56ef15f-4be1-4b67-b69a-c876f9113437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:e4:1e:ac:01:31:f8:b6:9e:f3:e5:cc:ce:
                    2e:d8:23:5e:05:37:94:32:23:14:5f:30:80:58:f6:
                    31:14:28:e1:c7:d7:cf:0b:03:14:1d:33:db:2f:53:
                    fd:59:7b:c2:37:6d:3d:29:73:c4:63:e2:e8:0c:8b:
                    eb:cb:2e:fa:16:87:b8:0e:ba:39:d6:46:17:15:33:
                    40:91:ff:f1:2c:d0:27:af:c1:82:01:0a:de:a6:8e:
                    1d:9e:f0:29:9b:0a:bc:fe:34:e9:b4:70:25:c9:05:
                    38:8e:0c:0b:58:7a:de:d9:28:70:6a:de:de:70:c5:
                    fd:47:06:07:29:07:50:af:ef:36:98:9f:72:af:a7:
                    df:42:a5:5b:a2:76:88:9e:2d:5b:c0:fa:ec:5b:65:
                    55:aa:e5:cf:4f:15:e6:53:4a:a7:27:72:9e:24:2c:
                    58:0b:45:7d:ae:9f:a7:8e:f6:ce:fa:8a:7e:82:c3:
                    96:e5:cb:1b:67:3f:ed:16:31:ed:9a:a3:7d:74:31:
                    9c:54:f7:91:36:10:48:79:8d:5f:47:ae:9f:cd:6e:
                    5f:ac:bb:bf:15:ef:ea:af:28:d2:cd:7f:8b:c4:5b:
                    b6:79:87:dd:82:59:b9:40:62:b7:29:2c:50:72:67:
                    20:e0:b2:91:d8:43:60:08:16:69:cc:1b:64:8b:35:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2F:DD:21:2E:DF:80:EC:02:D0:64:D1:B9:8A:FD:54:0E:7C:25:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e0414-e534-3b15-a2e4-e11bf08d2993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e1:3c:97:09:80:bb:f7:2f:fd:3b:7e:c9:70:a3:5c:4a:2b:
         de:ec:57:0d:a1:af:98:f6:10:9e:a4:14:ee:2c:dc:ae:0f:4d:
         38:f0:62:1f:df:a1:78:12:15:93:4b:84:99:50:72:4a:ce:8c:
         7c:16:89:e3:6b:45:7f:16:b1:b0:04:73:ff:8d:0a:22:92:96:
         88:eb:1f:9a:de:b2:f2:cf:97:b4:27:06:ed:85:6c:a9:ba:4a:
         94:9f:7e:ea:c6:22:1c:70:48:b8:6a:82:43:85:c9:d7:50:b5:
         88:7f:49:64:45:cd:19:95:87:cc:d3:c9:5a:9b:85:12:5f:25:
         cc:ea:8f:48:65:cf:7a:f7:fd:d2:4c:f3:41:7a:54:4c:55:1e:
         88:e8:85:13:da:e3:20:a0:bb:4a:6a:58:e0:ac:66:0a:5c:2b:
         14:1f:50:88:5a:80:f9:04:b4:42:06:da:64:a1:9f:3b:e7:b6:
         e6:50:82:70:38:67:6b:27:d7:69:5f:f7:c1:d9:bb:dc:a5:c0:
         1d:5a:82:07:1d:04:cb:d4:ad:ed:a7:74:21:f9:f8:59:5e:e0:
         e1:fd:65:f7:41:7d:bf:56:02:17:f6:87:49:3e:ed:f8:af:10:
         ad:3c:a9:48:d5:88:c8:17:d7:dc:00:a8:da:f6:26:50:82:96:
         c5:b7:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:25:25 2026 by rpki-client