Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c462cd-aa4e-35de-ba92-b564b3ac44ed.roa
File:                     21c462cd-aa4e-35de-ba92-b564b3ac44ed.roa (raw, json)
Hash identifier:          5iAv1SJIzB3pCM1KUS2OKLYR5eMIYrooNhOEQQ4DQt8=
Subject key identifier:   16:98:94:C4:98:43:8E:70:9E:30:91:B3:C5:65:52:6C:3F:29:1C:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972E7619E9FE6D05BA35790
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c462cd-aa4e-35de-ba92-b564b3ac44ed.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20172
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e7:61:9e:9f:e6:d0:5b:a3:57:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=97b64402-3c58-4818-b04e-defcc9f5d489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:42:49:c4:73:62:1c:cc:b7:f7:7a:a5:fb:
                    4b:06:f0:e4:62:3d:c7:0f:e2:67:55:42:1c:38:54:
                    9e:e4:c5:0f:c6:c2:1b:ad:dc:a8:72:c3:73:97:3f:
                    ec:df:4c:53:65:3b:b5:29:8d:de:44:f5:34:66:ef:
                    9d:cd:5c:6b:5e:23:68:fe:99:04:f8:b6:e3:64:c1:
                    5b:b4:f4:f7:54:fc:f8:04:3c:3e:d4:c2:43:e9:8b:
                    7e:81:5a:b8:47:9c:9c:47:52:d2:87:e1:d1:ec:48:
                    95:fb:3f:c8:87:19:6a:b7:f0:6b:48:1f:96:66:3c:
                    98:e6:dd:b5:ee:77:d8:2a:31:cd:63:cb:73:9c:19:
                    2c:7f:40:f3:4b:07:85:98:ac:cf:0f:ae:43:46:63:
                    82:db:36:bd:aa:8e:1f:91:60:ea:f8:7e:04:de:8d:
                    b4:82:4a:55:53:e3:40:3a:3f:82:9f:60:32:08:c1:
                    b0:0d:3e:c0:99:b9:07:36:f4:55:6a:46:c9:e0:59:
                    55:a9:92:c3:e9:bd:6b:ac:cc:42:ae:92:0d:c4:35:
                    f9:8d:55:5e:6a:74:0c:1a:73:1f:c5:d4:1e:77:80:
                    1e:b7:a1:37:ab:f9:a3:d0:85:c3:6d:4f:9c:f1:92:
                    63:e0:1a:84:45:4e:ce:7a:34:d1:da:c1:41:5a:6c:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:98:94:C4:98:43:8E:70:9E:30:91:B3:C5:65:52:6C:3F:29:1C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c462cd-aa4e-35de-ba92-b564b3ac44ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:76:95:13:30:70:ff:73:53:4c:14:9e:1e:33:0e:a2:75:75:
         f3:d7:d6:94:db:2e:d6:0b:d9:27:42:45:a0:a0:87:0e:70:df:
         6f:c1:63:65:2e:1a:e0:0b:16:83:33:ce:e9:f2:5f:37:e1:60:
         19:37:eb:b1:fb:50:b9:56:b9:c8:4b:9c:fd:75:74:32:dd:5d:
         fb:17:c9:2c:05:1d:9e:33:bc:3f:3a:a2:45:d6:68:62:b0:f2:
         f7:cf:25:c3:d2:c2:71:4e:3a:ce:dc:7f:af:42:b6:2d:58:6b:
         90:3a:0d:08:f9:2f:bf:bd:95:a3:f7:eb:59:fc:e1:2d:e7:db:
         a8:93:a9:59:e6:9c:ce:63:8f:63:66:56:0b:f4:fa:40:ec:b2:
         f5:0f:7f:5c:2e:bf:75:65:21:be:ea:05:d4:70:cc:57:09:74:
         6a:89:39:1f:6c:61:c3:ad:3e:50:21:4a:26:f5:9b:f5:82:36:
         8b:47:22:a4:a8:cf:1b:0c:45:0f:df:76:3d:f2:b8:6e:6a:22:
         fb:1b:ee:28:9b:47:09:9e:1e:96:18:9b:e2:cf:95:64:3f:ba:
         4f:ff:99:6b:97:fa:68:4f:c3:8f:f0:bd:c2:99:96:af:a1:98:
         47:74:d9:86:ea:cb:44:02:9f:55:f9:64:6b:bf:7e:20:b1:7e:
         9d:69:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:02:26 2026 by rpki-client