Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d8306a0-eb63-3c5c-ad60-25c8948a8b79.roa
File:                     0d8306a0-eb63-3c5c-ad60-25c8948a8b79.roa (raw, json)
Hash identifier:          yk0QRkvvUsWklEVfhevH+b6Wh6UGYoOSw2UbeV4Npcs=
Subject key identifier:   CE:21:50:B3:CE:77:00:A5:CC:43:E5:61:7B:81:2D:BB:84:23:B1:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA22B7081A93FAC4897B300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d8306a0-eb63-3c5c-ad60-25c8948a8b79.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     396584
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:2b:70:81:a9:3f:ac:48:97:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=9ea79a8f-5a5c-4426-8779-7333cb6a5804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:bd:60:84:3e:dc:ec:38:94:5d:4b:a1:0e:
                    3c:cf:1b:51:30:06:cf:f7:8b:f6:b9:a5:9d:8f:81:
                    65:1d:7a:14:87:66:37:82:1e:d7:07:94:37:c7:31:
                    f8:0d:84:e4:3a:fe:7e:72:73:52:e0:7a:75:1f:f3:
                    a0:e6:1d:88:9f:df:cf:6c:5f:db:3d:90:74:a5:2d:
                    ca:3f:d4:22:1e:a0:cc:7e:5a:67:41:31:84:0c:f1:
                    91:68:a3:b7:1f:6b:ff:83:66:3b:1d:c8:21:d0:75:
                    b0:61:8e:2d:13:9f:87:fa:c6:73:a9:28:5d:ce:c0:
                    62:95:ef:3e:eb:e0:3a:b0:58:c7:64:25:02:34:57:
                    7e:bf:e1:af:49:a0:92:5d:80:f3:25:7a:d2:97:67:
                    10:a9:60:a2:99:34:38:92:6d:0d:bb:75:8e:a2:82:
                    d0:07:76:00:1e:f7:ef:e7:b0:32:03:33:b0:4f:9b:
                    b6:77:cc:51:82:d7:10:ae:7b:88:4f:bd:26:68:e3:
                    0b:d5:62:ed:91:67:67:87:18:73:81:e8:79:c5:6c:
                    20:b2:d0:94:6a:44:b7:2a:9a:25:e6:13:40:f0:26:
                    94:ba:32:48:d1:5b:81:73:74:fb:5b:53:6b:87:34:
                    7f:8f:58:dc:2a:82:36:8e:3a:ea:6f:ef:87:78:8e:
                    82:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:50:B3:CE:77:00:A5:CC:43:E5:61:7B:81:2D:BB:84:23:B1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d8306a0-eb63-3c5c-ad60-25c8948a8b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ad:71:d7:56:9e:f4:2a:56:c7:72:32:44:5a:9e:59:af:10:
         b2:f7:74:da:5e:39:d0:d9:56:34:7c:d9:89:ec:95:6d:8c:0f:
         f0:d6:48:a3:56:ea:86:c3:16:52:2a:e0:a1:73:d1:d3:07:44:
         fa:cf:ae:0f:5e:2d:fb:c0:e0:f4:a1:f0:0c:c4:98:94:b7:02:
         c3:a5:0b:1f:db:68:27:d3:92:24:0a:af:f9:12:e0:71:d5:38:
         43:a7:d6:93:0a:20:cc:c6:43:65:8d:32:af:ca:4c:6d:c6:70:
         e4:de:97:9d:2b:71:e5:e6:b9:84:89:2b:da:6d:6a:eb:49:ce:
         04:b0:57:ea:11:fa:a7:6f:d4:07:9e:2c:7c:35:63:fa:13:6e:
         18:df:73:53:12:cb:68:7f:ab:3b:02:aa:57:95:af:59:6a:01:
         f1:3c:15:4a:8b:5d:10:ab:9d:23:a4:7b:e7:e1:1f:21:e2:26:
         79:4d:00:19:3f:ee:df:bf:06:89:04:3e:4b:34:1b:34:1f:eb:
         6b:23:99:38:d6:77:2e:b8:93:e5:c7:fe:90:86:7a:d8:49:fa:
         7c:d3:81:bf:ef:ab:64:1c:f9:ec:57:9b:dd:e9:09:90:5b:8c:
         cd:b2:06:3d:a2:02:84:15:4f:70:18:4b:54:b9:3f:57:7a:01:
         df:f3:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:16:53 2026 by rpki-client