Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fcf5912-50c3-3548-a8ce-81344175e049.roa
File:                     3fcf5912-50c3-3548-a8ce-81344175e049.roa (raw, json)
Hash identifier:          dI44g1fq+bgsiQCllJNEpo9xHlyCXO0unPOk02Q3Ojw=
Subject key identifier:   A4:6C:BB:CF:37:5F:C2:CA:2C:85:27:4C:CB:A1:7D:2F:0A:69:AD:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498BAD35D563B25DFB515900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fcf5912-50c3-3548-a8ce-81344175e049.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396594
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:ad:35:d5:63:b2:5d:fb:51:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9a901ebe-8a8a-40a9-a61e-7eed61fd5264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:21:bb:18:58:8e:67:0a:4d:1d:67:02:45:
                    af:65:ce:54:50:6b:f1:ea:65:c5:50:7a:b6:95:79:
                    41:ef:d6:2a:53:6a:eb:e6:4a:94:01:30:c8:b6:aa:
                    cf:60:cc:e0:c7:7e:21:39:d4:04:15:af:38:a9:3b:
                    49:f2:67:e6:7d:ac:a0:3e:fe:d5:3e:aa:73:03:3d:
                    d5:b1:ad:b1:e2:e8:87:7f:43:ab:83:3c:cb:53:2e:
                    26:07:d5:23:5a:e3:6b:cb:7a:89:c7:6c:ac:ba:c1:
                    ce:0f:86:75:75:d6:35:58:73:ab:8d:9d:a3:76:37:
                    21:f1:89:42:f5:74:89:d8:2e:80:3e:21:ca:8e:8b:
                    74:e1:77:58:b2:f6:24:6f:1f:dd:d4:3d:8d:c5:e0:
                    ba:4f:71:b5:cc:41:e7:76:61:50:d9:ca:4f:3e:c2:
                    21:4b:f8:f0:1f:75:14:99:50:a4:23:c0:35:47:a8:
                    5f:f7:55:2c:65:74:3d:00:b0:c1:57:fe:c6:a5:79:
                    1b:38:a2:27:67:1a:a3:63:13:93:5e:8f:2b:eb:8e:
                    aa:92:d4:7f:ad:90:75:97:16:2a:c1:d9:e7:c1:d7:
                    5a:ef:aa:17:a9:06:e2:e0:48:1a:f4:e4:44:85:a3:
                    ed:9c:60:00:74:fa:d4:68:f5:80:9c:1c:d4:ed:92:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6C:BB:CF:37:5F:C2:CA:2C:85:27:4C:CB:A1:7D:2F:0A:69:AD:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fcf5912-50c3-3548-a8ce-81344175e049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:68:99:0e:9e:ee:9c:f9:0e:30:15:e5:ff:e7:27:6b:78:
         4f:de:6c:7f:f4:7b:07:a8:f6:8f:f4:b6:6a:a6:ac:b5:ca:fe:
         f6:bb:00:ce:57:96:37:c4:4f:45:62:1b:38:e8:a0:b7:9c:04:
         50:f9:a0:27:2e:9b:6c:84:9a:94:9c:b0:85:78:9c:5b:12:3b:
         9e:c7:58:a2:a7:ae:d9:85:87:ae:57:4d:b2:ed:7a:e1:0a:3c:
         91:9d:56:50:21:ea:3f:07:89:b6:78:c1:1e:5e:2d:2c:e8:9e:
         0d:b3:ec:7c:4a:3d:2d:02:a4:8b:83:7a:43:22:3c:5f:63:b1:
         16:11:10:61:14:20:ad:cf:03:ff:fa:de:ca:d7:23:1f:df:2d:
         3e:69:0d:d7:9a:15:81:b1:53:13:4c:9c:b4:cc:18:bb:4c:9b:
         87:d3:33:e2:62:bf:8e:ab:0c:36:60:22:05:4a:57:e9:7e:e7:
         3f:55:fd:ec:35:fd:43:56:7b:34:81:eb:0f:50:57:70:8d:95:
         8f:71:ea:65:3d:4c:b8:7f:5d:c8:ce:7b:5f:31:35:91:8d:d0:
         62:80:a5:a2:03:79:45:24:8f:c7:98:a5:b5:bd:ae:c3:06:7b:
         c2:49:b9:ca:c8:8b:9c:db:59:d0:15:6b:c5:8b:12:79:22:e8:
         71:15:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:02:40 2026 by rpki-client