Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/147f5806-8d92-3055-a450-b8977d71279d.roa
File:                     147f5806-8d92-3055-a450-b8977d71279d.roa (raw, json)
Hash identifier:          urTmY7zOLKD2X8X8CSbg+MxXkcgUqbC5wpauNineK04=
Subject key identifier:   C2:82:E5:24:CE:C6:35:B3:28:35:1D:CC:F4:D8:98:83:1D:9B:8D:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727C871820609454E20DD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/147f5806-8d92-3055-a450-b8977d71279d.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396543
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7c:87:18:20:60:94:54:e2:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f94850b2-1e75-42c3-8297-7116a4ac537b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:e8:7b:5b:56:7f:13:ff:e9:6c:d0:c3:78:
                    f2:f1:08:42:68:12:d5:b7:76:f3:9a:00:a4:d8:a5:
                    d0:b3:62:66:c6:28:92:13:97:67:04:e9:b8:ce:64:
                    08:f4:33:da:c0:7b:77:8a:f4:aa:44:be:f5:47:55:
                    ab:4f:c0:bc:4c:ba:d4:07:1a:39:6b:e4:96:8e:ba:
                    cb:30:c1:d2:06:ec:a4:80:1b:58:ce:d5:35:6d:c5:
                    ce:fa:cb:f3:38:4b:20:d9:61:a7:d7:60:ab:38:2e:
                    1b:66:7a:65:2e:6c:ca:6b:e2:8b:90:72:04:3c:d8:
                    04:ac:9e:c8:6b:eb:d4:ac:06:26:67:b8:20:55:b0:
                    ee:09:8d:4b:30:db:ea:9e:e9:da:b7:7b:6c:d2:b6:
                    2d:86:fb:68:c9:3b:d8:08:40:7b:26:9a:2e:16:99:
                    f3:47:b9:13:48:13:cd:e9:1d:62:3e:3b:bd:03:08:
                    0f:e5:f7:30:75:fa:bf:b1:d1:03:f8:8c:ce:62:ec:
                    d0:4a:64:72:54:d4:8b:b5:d1:61:f6:72:6f:ff:bf:
                    6d:fa:00:39:17:49:95:9b:86:ca:60:4b:51:f9:17:
                    42:53:ce:b6:cc:9f:9f:b1:17:3f:3e:22:8d:8a:e2:
                    27:9e:1a:d9:44:0d:1b:ac:aa:22:ec:6c:55:ac:41:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:82:E5:24:CE:C6:35:B3:28:35:1D:CC:F4:D8:98:83:1D:9B:8D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/147f5806-8d92-3055-a450-b8977d71279d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:de:9e:01:fb:fc:a3:c0:44:2d:ff:61:89:03:6c:a8:12:09:
         fb:36:a1:fd:0d:90:79:2d:ec:be:2c:7a:d3:19:78:93:fe:07:
         e2:14:57:1e:2c:e4:12:24:28:9a:65:e4:1a:10:68:9b:d9:1f:
         c2:99:01:1f:8d:a4:3f:9b:47:9f:8b:1d:79:9d:40:8f:43:72:
         bf:bd:56:fd:c9:3a:91:9b:81:47:62:e2:5e:9e:c9:84:42:49:
         67:8c:31:8f:69:97:d8:4e:a6:ee:b5:ec:5f:da:2a:56:24:74:
         55:11:4a:72:f1:d5:93:36:f4:17:04:4d:77:e1:7e:e2:5c:a7:
         75:91:6e:1c:af:42:5d:fb:3c:71:c9:d6:32:f6:0c:df:78:a4:
         76:4b:bb:cd:23:60:11:3b:06:be:76:44:4a:8c:be:5e:5f:c2:
         a5:86:e4:21:9b:f9:d8:ac:03:f0:0a:f1:18:6b:41:fe:c5:b0:
         c2:22:b2:73:65:41:d4:e8:75:30:4d:4b:e3:26:fb:da:ee:63:
         15:86:ce:e0:be:b2:3d:ed:65:35:e8:9b:66:55:70:9e:25:23:
         80:6e:b0:96:01:05:57:cb:a7:5b:f2:ff:a2:f3:47:f6:6f:9c:
         ab:ec:fe:f9:2f:c3:a1:ad:03:7f:7b:9a:30:6c:23:cf:4a:de:
         60:eb:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:13:43 2026 by rpki-client