Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a09dcba-d479-3c24-aec3-8d5f11c3a168.roa
File:                     2a09dcba-d479-3c24-aec3-8d5f11c3a168.roa (raw, json)
Hash identifier:          O9M9/BEz1K0W/7fDB8BPDIx03HO6YMyMQjRVp0W+3Pw=
Subject key identifier:   F4:1B:08:D2:F1:C5:FC:83:A2:52:5E:6A:9F:EA:AA:A9:61:54:28:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B2056206686845ACC10340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a09dcba-d479-3c24-aec3-8d5f11c3a168.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     396604
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:05:62:06:68:68:45:ac:c1:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=54eb2220-1dfb-4716-b205-ab32ff052fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:64:59:2f:99:25:5f:b2:2d:fc:6a:aa:d4:
                    ad:5b:62:43:29:f4:1b:a9:62:b9:e4:ca:9c:23:1a:
                    5b:e0:63:e7:48:af:81:70:87:02:32:ca:ac:da:fe:
                    ae:2c:67:49:f2:12:32:99:bd:61:d9:1a:17:f9:1e:
                    18:4d:1f:d2:7c:92:ac:9b:f0:25:c6:7d:c3:f2:8b:
                    ea:54:86:32:11:c0:3d:bb:4c:08:fd:cc:e1:a8:69:
                    51:8a:79:29:ec:79:0e:78:57:ed:ea:cf:49:6e:d4:
                    8f:e1:c3:e5:3f:9b:1f:c3:c6:de:3c:c4:61:39:18:
                    fd:35:91:b4:fd:82:1c:46:3d:f9:e0:bb:58:09:a9:
                    d8:38:84:80:8f:3f:52:78:35:e4:6d:f6:3a:d8:a6:
                    76:ea:f8:86:39:d3:cf:71:25:11:eb:72:f7:e1:97:
                    69:e9:c0:5a:da:7a:ca:d7:ea:0e:bc:7d:62:85:2f:
                    ed:0d:1a:bd:3f:4f:3f:8b:4f:10:ad:39:52:59:4b:
                    14:3b:65:fc:45:8e:f4:73:70:60:95:35:3e:52:a1:
                    9c:7e:be:59:c7:e1:87:26:6e:e1:08:03:ac:5c:77:
                    81:ce:0d:99:5f:75:10:c2:88:b4:e6:74:41:82:aa:
                    b8:e8:40:3e:d2:4a:d4:da:d6:d7:36:8a:07:98:79:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1B:08:D2:F1:C5:FC:83:A2:52:5E:6A:9F:EA:AA:A9:61:54:28:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a09dcba-d479-3c24-aec3-8d5f11c3a168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f6:a7:a0:d6:c2:3b:3b:fb:21:68:cf:8f:87:15:5d:a6:b6:
         46:9c:d9:de:06:da:c9:be:2e:df:2d:d7:ef:59:c6:46:0c:05:
         16:76:d4:0c:10:a1:54:87:de:85:19:a0:83:af:6d:90:f6:8c:
         a7:32:6a:fe:92:98:26:24:02:f4:c3:93:5d:4b:8a:8b:d6:3b:
         41:e5:c4:26:3f:8b:e2:31:2c:a6:81:15:33:5b:a6:e1:cd:0b:
         ea:6c:b3:0d:76:0c:63:b3:85:ab:d3:b4:a7:0f:48:0b:e1:99:
         86:07:1a:e9:cc:53:d7:ae:63:b4:f0:5d:55:00:8c:c1:08:71:
         64:1c:48:6c:88:bc:12:b4:a1:a7:ef:db:14:3b:6f:99:a6:9d:
         a9:48:59:50:00:a5:e3:d0:d4:5d:ac:81:03:6e:e3:33:4d:7d:
         fb:c7:8f:f6:11:fc:df:31:f5:22:d1:10:ed:fa:f4:6f:fc:2a:
         bb:06:12:c5:11:27:69:11:d1:b9:3b:85:c4:f4:a1:bb:b5:a6:
         0a:57:4a:47:11:c7:e7:aa:e3:e4:15:3c:28:25:a4:d8:67:58:
         7b:0c:20:ba:8f:bf:be:9c:29:6a:06:d2:38:1d:a8:af:96:f2:
         dc:f4:5e:8a:48:28:1b:0a:dd:78:93:e2:1a:76:23:5c:5e:94:
         14:2c:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:18:23 2026 by rpki-client