Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ad481a8-c9cc-325b-924d-66a76c600a52.roa
File:                     0ad481a8-c9cc-325b-924d-66a76c600a52.roa (raw, json)
Hash identifier:          Zni7vlBXp8NsSxilQWuhmNCX4uoev1PtnWJrvrWwHlA=
Subject key identifier:   02:9C:FF:39:7F:BB:AA:6F:C2:98:08:0E:86:71:6E:D4:59:A9:4F:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49732276CFCCD99E57835900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ad481a8-c9cc-325b-924d-66a76c600a52.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396587
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:22:76:cf:cc:d9:9e:57:83:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=70154625-aec2-4eb1-be5b-9685fb485ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:0e:83:e4:ba:b3:ce:2d:94:1d:62:33:19:
                    ac:14:9a:6d:48:fb:ac:c0:04:ed:2c:50:4c:00:47:
                    9d:38:f9:dd:ca:84:88:4a:e5:fb:d5:37:62:dc:1c:
                    74:92:d6:94:40:ca:e9:96:40:0b:7d:b1:da:5d:98:
                    bb:5c:e5:98:22:93:64:f2:65:22:71:9d:ca:01:f4:
                    48:63:f3:d4:03:41:91:c1:16:d7:d4:d0:93:1d:4a:
                    a6:c8:d0:9c:d0:20:9f:9a:b4:ca:66:44:82:41:a6:
                    3a:2c:af:01:c0:3c:6f:cf:c3:1a:5b:1f:ec:d4:64:
                    59:70:72:c9:fd:3b:5c:b5:05:42:7e:d5:33:28:b0:
                    f3:5d:2a:94:83:e7:43:db:5a:58:0e:33:15:f4:27:
                    89:ed:0d:2a:c9:43:27:3c:e0:7f:b8:05:1f:d8:84:
                    8b:c9:73:2d:c5:ad:fa:fc:16:9f:23:1e:0c:10:47:
                    b8:0e:f1:3b:9a:9f:ce:b8:6f:fc:d2:3d:69:be:dc:
                    7b:fb:df:bf:dd:7c:12:1e:58:13:a4:ca:d3:d6:70:
                    fe:43:95:79:87:23:d3:88:0e:f0:ed:37:11:14:af:
                    e0:b7:b4:46:d5:90:6a:cf:bc:7a:8d:d8:0c:20:a5:
                    29:20:2b:b0:1a:4c:ea:aa:f8:98:a4:51:d8:f5:1a:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:FF:39:7F:BB:AA:6F:C2:98:08:0E:86:71:6E:D4:59:A9:4F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ad481a8-c9cc-325b-924d-66a76c600a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:d8:15:71:fa:07:86:cb:c4:95:55:93:5a:d9:ec:fc:8d:7f:
         7b:50:5f:3d:bf:34:7f:ae:18:93:21:66:8b:4c:f8:50:48:b2:
         29:2d:37:8f:16:17:af:fc:13:26:89:21:f5:a5:31:df:43:d1:
         39:78:f8:47:55:aa:45:b2:8d:05:19:ea:6a:5f:0d:c8:9b:27:
         36:30:5c:8c:41:46:24:f4:60:61:60:09:b3:2f:cf:b1:2f:f7:
         67:99:b6:de:0e:d3:54:5b:fd:98:e1:41:ff:68:7b:0f:53:77:
         3a:4c:3e:0d:e4:60:9b:ff:90:e7:d8:e6:68:32:78:31:a3:c6:
         c3:39:b0:24:e2:86:81:0b:69:80:38:32:26:61:be:d8:3e:86:
         87:81:2b:52:e0:d0:db:4c:94:dd:51:72:3b:70:b7:00:75:53:
         27:58:ce:83:de:a1:3e:6c:7d:0a:96:25:58:41:38:e8:ea:53:
         df:d9:0f:0c:73:0a:d3:ef:1a:ab:31:07:b7:3e:32:e3:3f:62:
         1f:26:8a:ee:d5:e2:c5:7e:0f:00:0b:70:35:78:6b:07:a7:c0:
         c6:20:49:0b:82:92:92:01:5c:2d:85:a8:aa:a0:85:30:b8:88:
         87:2d:90:db:ea:98:ae:fc:1e:2e:07:d6:a9:08:9c:fb:c4:45:
         c8:27:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:07:46 2026 by rpki-client