Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0613af0d-1d5c-309c-8930-d7873cd3332b.roa
File:                     0613af0d-1d5c-309c-8930-d7873cd3332b.roa (raw, json)
Hash identifier:          3dLzsqVJ1w4Mn85ffp+ODKrE5gX83Q8EEGCA3X8u1jA=
Subject key identifier:   58:99:10:80:39:63:A6:60:E0:FA:80:31:BC:53:AA:F4:79:B9:46:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498A53B38C01302E99EC2080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0613af0d-1d5c-309c-8930-d7873cd3332b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396587
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:53:b3:8c:01:30:2e:99:ec:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c9e28a93-fdff-4cb1-b91a-9c1c446d556f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:ad:eb:77:00:0c:6f:b9:ad:92:25:7b:39:
                    b3:3a:97:ab:5f:22:13:5e:68:71:d7:bf:48:78:4c:
                    ba:9e:61:42:02:8d:0e:27:71:5c:d6:a0:eb:f9:4d:
                    f4:5c:54:87:68:bd:20:e6:99:fd:c7:05:72:c5:51:
                    38:63:9e:a0:0e:a3:1b:93:d6:d1:16:b1:5b:c4:1b:
                    d7:f3:62:54:54:52:8a:95:d3:38:c9:82:50:14:a6:
                    23:15:cd:37:2f:51:7e:21:0f:ff:6b:62:cc:04:c1:
                    34:f8:2f:d7:a7:5f:75:fe:c8:9d:1f:3e:b4:47:2b:
                    1e:0e:2b:df:ed:f3:9a:bd:b7:5a:1e:d6:16:13:e7:
                    65:40:b0:e0:c6:f2:e6:0f:99:bf:15:4c:f9:ea:7d:
                    0d:d4:79:77:71:f8:18:99:51:ae:06:f3:84:82:3c:
                    3b:09:91:c3:35:32:75:2a:1a:51:49:fc:31:0d:46:
                    01:1b:03:ee:e4:12:b7:91:0d:de:f4:1c:26:f2:3b:
                    c3:3c:79:ca:b5:af:ab:75:02:0d:5b:ff:ce:18:31:
                    3e:70:09:74:35:96:15:ac:97:83:7f:d9:79:ab:57:
                    79:46:cc:4d:ea:ae:44:ca:16:47:ad:e8:a5:9a:49:
                    e9:f3:1b:b1:e3:d4:f6:1d:85:f5:f3:50:13:21:2b:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:99:10:80:39:63:A6:60:E0:FA:80:31:BC:53:AA:F4:79:B9:46:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0613af0d-1d5c-309c-8930-d7873cd3332b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:96:5a:24:e6:b8:71:90:ca:bd:4e:42:c0:23:34:f9:f1:73:
         c1:96:ab:66:f9:2e:f4:07:0a:1e:c3:05:c2:d5:47:88:79:82:
         be:29:d8:f0:2f:1f:d4:0e:82:e8:c0:b4:03:ad:77:22:22:2e:
         5d:18:b0:7a:9a:e8:44:96:9c:e9:11:7d:1b:e2:51:f6:44:85:
         b6:a4:5d:87:23:88:d4:9d:a0:db:b5:91:77:45:fc:81:7f:ec:
         c8:92:a6:89:bc:b5:d2:22:0b:3c:3c:1f:fb:c1:30:af:2c:9a:
         60:dd:ef:00:eb:9c:78:27:1c:11:3a:c5:29:14:59:6e:37:82:
         7d:de:30:fd:9b:c4:a1:a2:94:2d:1a:a4:0e:15:0c:c2:49:42:
         f1:a2:8e:7c:94:99:75:89:32:a3:ca:b1:30:7d:7d:a3:51:e6:
         b9:4d:f9:26:62:46:e0:2f:95:ec:8e:66:a1:18:a1:9c:21:74:
         3b:c2:cd:b9:cf:94:f2:9b:2f:ad:a6:ec:c0:10:48:06:6f:d3:
         89:b7:8e:eb:f6:de:39:9d:70:e7:d2:ed:6f:95:7a:b0:c4:6e:
         dd:d2:c0:79:c8:35:fc:ab:18:b0:e9:5c:d7:87:a0:94:32:33:
         15:43:1a:82:d6:aa:3f:e7:b5:89:a4:9d:57:ef:71:39:5f:30:
         c5:08:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:51:29 2026 by rpki-client