Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ded9a610-32d3-3153-b23e-4f29df1781f1.roa
File:                     ded9a610-32d3-3153-b23e-4f29df1781f1.roa (raw, json)
Hash identifier:          bGOASWESbCcRHz1AB3Vr/Q3hdlN6a0eXSaOedC2QB+A=
Subject key identifier:   67:12:BC:AA:7D:6C:EC:4B:35:F8:F6:24:83:9B:06:DC:A2:15:BB:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE227424FB205B1D2DE97C480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ded9a610-32d3-3153-b23e-4f29df1781f1.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     396609
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:42:4f:b2:05:b1:d2:de:97:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=26c5bfa5-cc69-4231-8d6b-04e987137348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:c6:72:85:fc:ea:af:92:eb:56:47:18:55:
                    41:7a:fe:cb:f1:e7:35:2d:cd:ee:8c:69:9d:7a:d0:
                    ce:3d:0d:65:e9:68:87:47:1b:5c:02:f2:d9:3c:20:
                    41:17:97:65:37:45:cb:98:45:1c:ec:97:16:d5:11:
                    48:76:f1:ea:29:fb:af:6d:5b:3d:af:24:4e:4e:75:
                    14:0a:15:1b:6a:18:df:a5:de:65:56:d9:3e:6c:a0:
                    be:74:8a:f5:40:ab:c4:0f:fb:d2:1b:e7:46:85:0a:
                    9e:9a:f0:dc:66:d6:1e:6c:66:3e:97:06:e1:db:d5:
                    11:3c:d5:e0:29:c7:14:51:67:8a:95:2b:71:66:66:
                    21:a9:bf:21:b5:d0:3a:7a:4b:76:a2:67:10:04:51:
                    ac:0d:a5:8b:f5:ce:c6:4f:2f:03:14:75:2a:69:99:
                    93:ad:94:40:e6:30:77:17:af:a2:d0:45:10:2a:80:
                    6d:af:26:f4:6f:f9:55:f9:97:68:86:fd:bc:4e:04:
                    f7:93:af:85:cd:66:89:f2:2a:08:bc:c8:44:7a:fa:
                    79:8e:da:5b:5e:61:11:5f:ad:c5:40:6e:31:3b:37:
                    69:46:24:e0:80:63:e9:6b:dd:1b:08:09:6f:ec:b5:
                    5f:d3:42:0e:02:01:59:89:42:28:96:97:a2:23:92:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:BC:AA:7D:6C:EC:4B:35:F8:F6:24:83:9B:06:DC:A2:15:BB:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ded9a610-32d3-3153-b23e-4f29df1781f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b9:e9:c3:04:3a:67:2a:69:0e:b3:5a:d7:f1:20:c0:21:51:
         34:0b:fb:e4:67:65:ca:12:2f:e9:0b:21:6f:91:61:71:d4:04:
         68:8f:90:88:5e:3a:ea:70:87:73:08:1a:29:67:a4:ea:35:30:
         e4:7f:20:ce:1c:b5:37:fc:0f:9d:ea:6b:87:84:34:c8:0f:78:
         ef:e3:0c:c2:05:99:51:5b:69:fe:d0:5e:d1:62:da:81:18:99:
         ce:0b:27:c3:d6:5a:0e:73:4a:e6:26:14:99:07:bf:f2:89:18:
         7f:c3:20:ce:f4:1f:04:5b:4f:4b:64:bf:aa:8a:3b:58:a6:b3:
         78:f4:29:58:1d:d4:ae:bb:b4:f3:75:8e:b9:7c:78:a2:50:e3:
         a7:49:45:91:63:39:4b:17:9d:49:4b:98:4c:b8:75:20:6e:a9:
         b7:59:a5:dc:fb:81:84:c7:5a:cc:ad:c7:80:13:df:40:f0:c6:
         d5:28:3f:f9:a0:c7:f4:56:f5:d9:43:d6:f2:37:2f:23:10:b8:
         02:e7:06:55:c2:42:e3:26:ef:d2:31:7a:b0:76:d5:e7:dd:a2:
         9f:f3:12:b4:5d:95:4a:c7:23:c6:fe:28:eb:ba:9a:4e:70:cd:
         e0:10:18:81:7d:83:f8:60:61:16:90:0b:b0:74:41:d7:32:ee:
         2d:49:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:27:45 2026 by rpki-client