Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
File:                     f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa (raw, json)
Hash identifier:          JrCMUWDQyq97sbu5L7YyA6yT4cYmrqSz5T9gVs64lKE=
Subject key identifier:   C9:89:FD:87:F1:97:1B:8F:D4:97:72:E2:27:AB:29:0C:D2:0F:51:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7BCAE9014AEBEC334AC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396578
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:bc:ae:90:14:ae:be:c3:34:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=f2d3e758-991f-4524-98cd-0e887b17b7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:e9:07:db:dc:4a:b0:de:b5:e4:6d:46:49:
                    6f:50:06:b0:34:94:04:e7:a0:b5:79:b2:f6:fa:eb:
                    05:62:7c:ab:41:e4:10:cc:8f:4b:f1:16:2b:df:fb:
                    1e:76:79:ef:a1:d9:f3:c1:40:11:dd:cc:32:76:2a:
                    8a:2c:22:45:c2:27:c0:cb:16:74:ed:33:8d:a3:1c:
                    3a:24:08:85:13:01:b0:a5:be:9e:1f:78:6e:cb:b4:
                    3f:6a:38:6d:4b:5d:51:95:e3:e0:38:ac:d6:41:8a:
                    12:9c:df:6a:29:47:48:25:25:9c:32:3c:fe:cf:04:
                    8f:6f:ce:bf:63:15:74:35:ae:71:6a:ce:35:43:9b:
                    4e:27:f3:c3:03:d6:07:da:a0:cf:2a:18:ea:68:8f:
                    6c:f1:e1:95:70:62:c0:48:d0:05:09:f8:51:64:a7:
                    dd:79:dc:77:0c:ab:53:2e:58:2b:38:61:d7:d5:db:
                    09:bb:9f:eb:75:38:0b:1d:d0:81:4b:a1:13:06:8d:
                    17:99:85:7e:88:ed:f7:a5:e0:71:56:78:2d:e9:8c:
                    5b:16:46:7d:92:87:0c:04:82:85:a8:11:bd:f4:8a:
                    6b:48:f3:1d:22:a2:d4:29:4d:6b:66:7d:a1:56:88:
                    3d:fa:8c:f8:2b:41:3c:3e:ce:13:6d:92:a2:55:b5:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:89:FD:87:F1:97:1B:8F:D4:97:72:E2:27:AB:29:0C:D2:0F:51:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:1f:b4:14:dd:13:4e:9b:6c:0d:9f:2f:7d:64:e0:3e:97:
         cb:a1:b4:3c:a8:e1:64:16:d0:08:05:57:bc:f0:59:da:9f:07:
         41:a4:c8:f7:d2:ac:3a:f9:eb:64:5f:b0:74:ed:14:61:f4:e3:
         d8:2c:f0:25:f3:ec:f6:18:74:31:1c:28:8f:a4:da:17:50:15:
         f8:1a:06:b6:17:e2:70:e9:ef:c1:1b:de:bb:1d:74:01:23:bb:
         21:d3:c6:3d:27:d4:9a:fb:fc:69:ee:f4:e0:85:3d:6a:35:c3:
         c7:14:74:90:c4:81:2d:4b:87:15:40:bf:6d:f8:f4:58:a9:c7:
         cc:05:14:7d:70:fb:00:4a:a5:fb:5c:d0:16:59:42:c9:b7:0c:
         3d:0a:b2:d8:5c:3c:a5:8d:57:4e:04:e7:25:4b:17:5a:43:3d:
         88:ec:03:64:c0:81:51:f8:ff:c6:3b:95:94:fa:fd:45:f7:2e:
         7e:ec:6d:be:be:c0:29:88:4c:c1:58:43:b6:06:c7:92:20:39:
         93:ba:10:84:fe:8e:68:57:2a:5e:ff:99:95:0f:8c:d5:cf:71:
         52:b7:a4:cf:ed:b6:c0:7b:4c:fe:ea:0c:d1:64:1a:0e:b6:73:
         7d:a7:e7:90:03:bb:e9:7f:28:2f:13:4b:a9:80:84:e2:bb:d7:
         18:03:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:25:29 2026 by rpki-client