Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/251ef22f-975b-3c3c-8b55-9aefb0392863.roa
File:                     251ef22f-975b-3c3c-8b55-9aefb0392863.roa (raw, json)
Hash identifier:          tDWEGVsyh7gzNxKO5r6l21CvWzZyLmmt+YJzxxqnjMs=
Subject key identifier:   17:08:A0:5D:3D:A8:72:5D:0C:E3:18:3F:B8:A8:F6:AB:12:9B:44:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA231822DB106866DE43A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/251ef22f-975b-3c3c-8b55-9aefb0392863.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     396547
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:31:82:2d:b1:06:86:6d:e4:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=12dc292c-25af-4e26-8ce1-10becfad379b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:82:49:27:49:ce:b9:5c:24:d5:42:b4:44:
                    d9:8a:91:ff:ff:23:b3:ef:2c:67:ed:01:7d:06:3c:
                    15:49:30:ca:1f:14:7d:e9:9e:4d:5a:8b:46:65:3d:
                    d1:4f:02:56:1f:5f:6c:bb:c2:ae:15:a2:68:86:9c:
                    86:4e:83:75:6a:98:bd:c7:f3:43:75:94:93:e0:35:
                    f3:f6:1f:16:fc:ea:f3:2c:cb:bf:7d:5f:7d:b0:4e:
                    45:7d:24:35:49:6b:e5:ad:1b:40:be:dd:4c:1f:45:
                    e8:96:c8:92:99:38:89:37:e8:4e:2b:47:92:3c:2f:
                    fa:ab:9c:0c:f9:cf:a8:ea:6f:65:4d:83:a5:01:74:
                    f0:68:81:ec:bd:b8:c4:69:74:10:9b:68:0a:1f:5c:
                    2b:57:c1:76:37:94:3d:5d:3c:39:7f:02:66:41:0f:
                    5e:77:78:6a:cf:a4:24:76:72:d7:40:43:c5:aa:9d:
                    39:d4:f6:e1:17:41:ad:b7:d3:9f:9c:6a:e2:47:96:
                    41:02:b3:16:67:e7:71:01:78:7d:ba:77:85:37:3f:
                    bf:2b:86:68:16:d7:87:6e:94:8d:86:b7:c6:7c:c3:
                    84:27:4f:86:cc:91:55:13:29:73:06:09:d9:7a:5c:
                    24:1f:24:55:de:58:dc:47:84:85:d0:2e:ac:b5:ae:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:08:A0:5D:3D:A8:72:5D:0C:E3:18:3F:B8:A8:F6:AB:12:9B:44:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/251ef22f-975b-3c3c-8b55-9aefb0392863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:02:53:f9:b2:c5:5e:47:b8:13:87:58:0b:8e:26:2e:b7:60:
         77:13:e5:a8:c2:0d:b3:65:88:5a:2b:d1:d5:1b:5b:f4:20:94:
         eb:73:70:89:20:f2:2b:b0:42:cb:be:b8:9f:e6:c6:fd:9c:56:
         f7:1a:95:04:80:6e:0e:8d:d1:8b:32:4c:84:da:35:93:93:40:
         c4:84:88:eb:69:c1:e6:07:78:08:f5:36:91:f3:ef:48:92:df:
         78:7a:f3:6b:8a:75:74:4d:34:15:e3:f5:ac:3a:30:db:25:2b:
         03:12:e9:d4:4e:cf:9d:82:ed:46:a3:d1:28:c8:22:19:72:2c:
         78:7a:65:fc:18:d2:2b:d2:0d:60:d0:2d:64:d6:c2:b7:01:1e:
         40:f0:87:ea:91:91:e2:c9:38:b1:d4:24:0b:5d:eb:f6:63:e4:
         94:dd:f0:ca:5d:4c:de:e4:c4:ae:2b:e9:a6:73:8b:18:44:03:
         84:0d:47:11:bf:51:1f:80:12:46:22:88:ff:80:f2:ee:b6:63:
         bd:64:59:35:8a:1d:0b:47:1b:d0:6a:da:29:50:4c:51:ee:ae:
         f9:fd:0c:e4:36:b9:b8:07:8f:27:ea:02:d1:6f:28:44:a0:68:
         c1:d8:82:bb:74:ba:37:a9:6b:83:ea:e1:97:91:22:af:2e:58:
         3a:56:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:11:56 2026 by rpki-client