Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35466e8c-c6fd-3e83-bbc9-01c7222f9596.roa
File:                     35466e8c-c6fd-3e83-bbc9-01c7222f9596.roa (raw, json)
Hash identifier:          L1YlCulrIQLwOnBpPiikSuBW2SwtTTnXByFn6m75DQo=
Subject key identifier:   56:F0:B2:0B:12:8C:28:01:73:7E:45:40:4A:1E:B2:35:69:6D:5D:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7B9112FC107C81290C2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35466e8c-c6fd-3e83-bbc9-01c7222f9596.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     20362
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b9:11:2f:c1:07:c8:12:90:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=1ef048fc-9e69-491d-8773-6f0b644473fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:99:9a:7e:93:25:80:b8:73:6c:43:5e:b2:
                    94:2c:98:aa:b9:15:74:30:48:d3:38:1d:ab:ee:a3:
                    1b:8f:51:cd:e5:ee:93:ec:cf:8f:ea:c4:92:36:0b:
                    1f:81:b2:d3:fe:80:bb:04:ce:23:46:b3:60:aa:6f:
                    9c:fa:a3:dc:37:cf:6a:83:d1:5b:6c:8b:f1:15:92:
                    34:31:1a:46:5b:87:de:d8:09:63:93:a1:79:d3:3a:
                    97:e7:35:71:59:fe:20:81:cc:eb:50:31:c6:ab:a0:
                    03:89:92:e6:cc:53:96:ad:ef:e4:97:b3:e5:dd:11:
                    57:eb:69:9f:44:c8:50:db:31:4e:5e:9f:6f:9b:47:
                    e9:99:15:3e:10:c1:f4:37:d6:14:1b:ab:77:36:dc:
                    b0:d7:64:2c:32:d4:b4:07:d3:fc:60:30:e5:23:a6:
                    49:6b:40:0f:40:a7:fa:2a:c4:04:89:74:a1:de:af:
                    b8:5c:69:ab:55:ca:f0:58:8d:e7:dd:d6:83:39:a8:
                    7f:34:36:8a:23:35:c0:c5:50:7c:80:6f:36:c2:0e:
                    7e:47:50:ae:37:56:77:33:a9:08:f0:73:04:ea:3e:
                    2e:43:8a:a5:c0:74:6b:b9:22:e2:2a:b4:8f:f9:39:
                    e2:de:d4:11:4c:dc:76:5a:ed:9d:c4:90:5e:d0:b1:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:B2:0B:12:8C:28:01:73:7E:45:40:4A:1E:B2:35:69:6D:5D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35466e8c-c6fd-3e83-bbc9-01c7222f9596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c3:1c:4b:7a:f7:02:08:0a:9e:08:34:93:b3:68:a6:aa:e7:
         73:c9:2e:51:1c:6e:f8:58:6c:6a:85:ae:64:40:21:62:0a:ff:
         06:e1:1a:be:a1:14:c0:11:8b:03:17:38:e1:0b:e3:e2:15:a4:
         76:2c:ff:82:5e:b8:eb:5b:03:b9:35:f8:eb:95:c3:0f:b2:20:
         2f:36:9f:61:e6:d8:95:a6:6f:c0:02:f6:bd:08:b3:c1:86:49:
         80:5d:86:00:2d:6f:cb:53:a1:07:1a:a4:dd:44:cf:a4:65:08:
         06:88:e0:f5:bc:4d:02:35:a2:9f:5c:89:4f:40:cf:cf:15:1f:
         be:dd:4f:c9:80:ad:a3:fe:4e:c5:c2:de:de:7f:f7:d0:6c:5c:
         8f:bd:1f:ae:6d:d3:00:04:11:8c:bf:9e:90:6a:00:d0:28:2a:
         f6:a8:14:b8:b8:dd:f7:bf:77:50:05:f4:39:db:88:66:35:66:
         0f:df:88:20:10:b1:71:9d:46:d8:ed:29:c2:f6:80:0d:ca:6e:
         ee:3a:48:fa:aa:3f:9d:e2:5e:45:1a:1d:f8:ee:39:c2:c8:fc:
         2b:6f:b8:64:70:4a:44:af:df:9f:5c:ff:c9:8e:0f:73:49:14:
         e3:89:00:9c:44:dc:ed:94:59:68:4c:c5:67:eb:06:8b:f3:2e:
         bd:bb:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:13:53 2026 by rpki-client