Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
File:                     152ea318-14d3-3b70-9370-be6873222de0.roa (raw, json)
Hash identifier:          U8N4kuKc3zb/Nh6YdVjwY/bA6m4EGEQn/ptQuu3FNIE=
Subject key identifier:   03:E3:75:AC:16:4C:B0:2B:AB:E7:7D:31:86:65:FF:3D:7D:C1:6A:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F15CCFA89E151048842C27F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     396551
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:fa:89:e1:51:04:88:42:c2:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=ddd4a12e-3ed0-422b-9f23-f3aa32e8bbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:40:5e:91:98:89:6a:75:ec:ea:13:cf:45:
                    af:ed:04:7b:cc:bc:a9:ff:ad:e3:fc:e3:b6:17:0c:
                    33:9d:8f:3c:79:f6:c1:e2:26:ec:e4:87:25:68:d2:
                    f8:45:1d:47:8f:96:b6:df:d2:c0:47:23:5c:50:95:
                    3c:fe:ee:55:e4:17:d6:a7:0f:56:27:f2:9b:b1:dc:
                    95:cd:b4:d6:3b:99:c3:f6:d8:a5:c3:2f:11:c8:b8:
                    7f:62:a9:10:9c:66:4b:c6:77:bb:77:9d:31:e7:9e:
                    c2:9f:72:99:fb:bb:23:47:8c:c1:15:be:9b:1e:6d:
                    a8:fd:0e:db:88:86:a6:d4:8f:c4:5c:6d:ff:35:08:
                    1d:b5:39:be:b1:4f:89:82:c2:ac:aa:58:73:36:e3:
                    24:1a:ba:e5:d4:be:2b:f6:ed:48:8d:49:84:da:56:
                    08:d3:87:b5:ae:40:62:cb:22:12:7c:89:84:bf:2e:
                    d9:eb:11:c0:94:08:c6:24:01:fc:f8:52:07:4e:3d:
                    7d:7e:15:a4:df:76:9b:ec:2f:00:c7:33:95:a5:95:
                    22:3b:b1:e8:0e:11:fd:f7:f3:ec:72:ca:6a:6a:c9:
                    67:94:24:ea:77:15:49:ce:93:f9:b3:84:35:6f:7a:
                    f3:94:7c:c5:16:30:39:48:ec:3a:2b:29:2a:90:cf:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:75:AC:16:4C:B0:2B:AB:E7:7D:31:86:65:FF:3D:7D:C1:6A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:84:c6:3c:17:d9:27:c8:ef:f8:e0:6a:97:c8:45:90:ce:57:
         48:dc:cb:8b:24:0c:6f:12:26:49:3e:00:c1:e5:68:68:ef:61:
         15:e3:24:bc:c1:1c:87:b5:02:f5:df:d9:48:c3:b6:db:7b:ac:
         c4:b5:cc:64:d8:37:15:a8:91:ac:e1:a8:ed:72:b8:e5:78:46:
         80:6e:99:df:fb:b8:95:3b:43:a3:34:56:fa:10:30:be:3d:18:
         38:80:f3:c2:df:77:8d:6d:bb:ae:cc:cf:67:b8:12:d6:1e:6f:
         96:57:db:29:59:f1:97:19:a6:72:3f:26:5d:55:13:11:d6:cf:
         78:25:51:76:28:0a:c4:7c:ad:37:71:3b:03:57:9e:26:96:71:
         9d:2f:4f:12:38:ce:ee:c3:a4:a6:6d:3b:a2:5b:20:06:5f:72:
         bf:e3:fc:99:f3:50:c3:44:f8:48:ae:42:7b:6d:64:53:61:ca:
         4a:97:11:a2:ad:c5:a9:a3:f0:4d:2b:4a:80:79:ef:f4:ef:0d:
         7b:da:70:d0:b6:67:09:5b:96:de:ab:40:a5:c5:c7:37:fa:01:
         a0:5b:1c:ff:3c:b7:d6:d0:bb:6b:27:92:11:90:ed:bd:58:20:
         ce:e4:e1:f4:f2:ac:0d:87:5e:fc:46:3e:56:46:4a:21:cc:d7:
         32:76:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:13:00 2026 by rpki-client