Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33645eec-6398-3098-8d26-01cb165ce9f7.roa
File:                     33645eec-6398-3098-8d26-01cb165ce9f7.roa (raw, json)
Hash identifier:          n+Xh4iO0CLSAIynBMIzpTx8VBgxcN5xmy1G5CIWFTF4=
Subject key identifier:   34:91:8E:02:A5:19:5C:B5:65:89:E1:1F:3B:C7:7A:9B:B1:66:73:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7B7ABF57FB185D9C4C040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33645eec-6398-3098-8d26-01cb165ce9f7.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396564
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b7:ab:f5:7f:b1:85:d9:c4:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=58a527fa-d2da-4d9d-971a-4a54f7c04cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:41:e9:c9:71:39:d8:f1:e3:9a:9e:b1:62:75:
                    c3:04:23:a5:58:d6:68:0f:39:e5:bd:a7:3a:98:83:
                    0c:45:e2:a1:18:c8:81:35:11:bb:2a:96:dd:f1:a5:
                    fc:6a:53:d4:8e:6f:01:ee:09:c1:b7:2e:2a:b3:9f:
                    6b:61:dd:66:c9:00:f7:1a:37:ce:4d:5c:9c:fd:01:
                    6f:c0:9b:a1:f6:3b:04:7a:04:0a:28:ec:4e:f5:fc:
                    d1:42:59:26:92:93:d5:21:fa:fd:7c:97:d9:b3:b5:
                    56:3f:ee:e1:a6:f2:30:9b:a6:00:b1:76:2c:32:86:
                    f9:da:af:ef:0f:c0:dd:1a:97:4e:28:b5:65:3f:13:
                    fd:dc:27:07:4a:3f:0d:b2:af:af:3d:9b:28:f3:2b:
                    07:51:e6:b5:db:6d:02:10:e7:02:33:00:6a:42:ba:
                    b1:41:fb:a0:53:67:a3:8c:96:7d:55:40:6e:6a:3a:
                    10:b1:39:1e:94:41:11:98:25:fe:21:95:0a:f3:91:
                    96:ab:d4:46:e2:3c:13:cd:a1:61:e2:86:fe:c7:0c:
                    e7:2f:8c:a3:ac:30:d2:c7:ea:30:b1:9c:34:5f:ba:
                    47:a3:b8:47:05:36:43:cc:f5:3f:94:4f:49:f7:b8:
                    94:8d:9e:ee:eb:f6:80:c2:42:f8:27:7b:df:30:9b:
                    a0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:91:8E:02:A5:19:5C:B5:65:89:E1:1F:3B:C7:7A:9B:B1:66:73:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33645eec-6398-3098-8d26-01cb165ce9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:51:a6:2f:c7:7a:01:4a:20:2e:2c:69:d7:68:31:c3:cf:
         04:27:1d:e3:81:51:85:74:b0:42:74:13:34:fa:22:ac:3e:4d:
         ef:d5:f7:dd:da:4c:44:90:f3:bb:cd:17:d3:95:6a:12:d7:ab:
         8e:14:20:93:3d:4d:f3:94:0d:e1:86:a7:a0:a8:05:a1:5a:a6:
         ea:db:46:09:0a:4e:d5:57:0d:51:7e:ca:4c:88:b9:e1:bb:be:
         fe:53:46:46:f0:81:dd:eb:26:aa:b0:9d:1e:61:84:70:25:a8:
         3d:fe:7a:95:a5:cd:22:4a:b3:97:3b:78:a4:27:4a:72:9c:31:
         7e:97:5a:32:81:6f:bd:62:6e:bc:b0:2a:af:aa:63:c6:81:33:
         fb:2b:fa:13:5c:d8:ee:16:b8:d3:c6:54:10:3d:17:9a:87:14:
         23:fc:20:65:c2:6c:d5:61:d4:2f:09:df:42:af:55:a5:a3:e3:
         8a:17:24:8e:a3:30:16:de:38:bf:04:5a:e0:03:17:d0:67:09:
         b9:a5:67:89:00:98:65:06:d7:b5:42:89:af:26:9e:61:af:78:
         86:4e:9d:b9:b2:2b:7f:07:e9:38:1a:a4:a8:6f:84:1b:1e:b6:
         51:91:d7:1f:95:68:39:54:69:3b:44:27:3f:1c:fb:45:e0:3c:
         f8:1c:ac:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:50:47 2026 by rpki-client