Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d3e358b-988b-3c18-8580-a6ab219a6bce.roa
File:                     0d3e358b-988b-3c18-8580-a6ab219a6bce.roa (raw, json)
Hash identifier:          Z4vLpuvTHgTgTwJ7qVDzxGgooKASrf8ydTx7jFR5TNg=
Subject key identifier:   A5:34:97:6A:EF:EA:A7:C4:74:94:83:D4:63:0B:80:7D:0A:FE:67:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFCC47F0DFD8C84E18F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d3e358b-988b-3c18-8580-a6ab219a6bce.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396567
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:fc:c4:7f:0d:fd:8c:84:e1:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=964607c6-660d-41a5-8eb7-276339da23d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:01:e1:1c:49:81:4d:29:67:5f:56:21:ba:f6:
                    fa:07:15:d6:08:f6:09:83:7c:7e:6f:d8:7a:9a:5d:
                    c9:83:66:ea:6a:b2:d8:98:66:3d:ad:74:f8:fb:5a:
                    76:c1:31:4f:66:bb:3f:fe:63:98:6a:d3:52:25:c8:
                    23:72:32:c9:e2:9b:b2:62:44:94:98:e7:31:14:02:
                    c8:e6:d2:c0:bc:de:17:99:6c:d5:12:d2:19:0a:fe:
                    97:b7:67:04:60:61:09:d1:74:ea:7f:93:29:e3:ab:
                    bf:9f:9a:c3:dc:96:ad:7a:2e:46:cf:ff:f0:cc:29:
                    ac:52:68:f3:63:dd:f8:60:00:c7:f2:ff:86:ec:fd:
                    6d:87:44:c5:07:4b:1c:a7:4b:6b:c7:54:28:2a:4a:
                    1f:b2:79:90:76:08:53:16:c2:81:fb:ca:62:be:39:
                    66:d9:84:bb:b1:39:44:71:bf:1a:55:9e:c0:ec:77:
                    f1:e6:1b:eb:7a:26:0e:f2:cc:ec:06:cd:11:63:9a:
                    57:62:9c:9a:51:24:db:c2:53:8f:85:e9:90:5b:7b:
                    f7:75:b1:e3:22:cc:45:b7:95:1b:20:9b:83:33:0f:
                    46:00:a4:b1:54:2f:b3:2f:6e:5b:b6:c3:d8:9c:dd:
                    3d:54:01:8c:5a:46:1e:84:40:e7:02:8c:f3:85:e7:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:34:97:6A:EF:EA:A7:C4:74:94:83:D4:63:0B:80:7D:0A:FE:67:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d3e358b-988b-3c18-8580-a6ab219a6bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:48:da:da:4a:57:cd:94:d5:20:65:aa:e7:97:9b:d0:11:5e:
         ab:2b:ac:73:e5:48:9c:34:31:00:bd:cc:9c:a0:f7:f9:97:d0:
         d0:0b:b0:52:74:db:75:c0:f1:af:10:86:28:7e:1b:54:cd:13:
         b6:46:4a:46:59:aa:47:7b:a5:72:74:00:4f:fd:a0:d9:1f:6d:
         ac:62:58:41:4e:c5:b5:da:92:cf:5c:59:f2:93:a6:21:af:c6:
         ed:74:80:be:31:ec:b9:50:77:a1:5f:9c:c8:c5:52:89:ba:e9:
         64:c9:77:8d:b4:05:f5:1d:a5:25:21:45:89:68:6c:31:be:0c:
         68:6c:e6:e2:74:0b:c2:e1:4f:bf:ff:a9:14:78:f1:1b:1a:b1:
         d7:45:6c:8a:ed:7c:85:aa:08:e0:3d:45:9e:81:3c:bf:c6:cf:
         53:c3:63:b7:8c:1c:5b:9d:1c:9f:b4:fd:57:6a:49:33:39:6f:
         09:0b:0e:e2:04:39:c2:49:b6:f2:78:09:eb:bc:5f:92:3b:dc:
         26:1b:4f:a3:13:5b:dc:4d:fc:8b:b3:18:9b:6d:27:f1:00:f5:
         d5:09:79:dd:5a:a2:1c:10:b1:e5:1c:fe:a4:fc:f8:2c:1b:4f:
         28:fe:55:da:9d:5e:1c:fe:9e:39:f1:70:91:0c:f6:27:11:08:
         9e:64:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:44:42 2026 by rpki-client