Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41087996-a514-3e40-9778-b8950d481323.roa
File:                     41087996-a514-3e40-9778-b8950d481323.roa (raw, json)
Hash identifier:          qO91kCOZhzWOV1tmjoAgS/3hmuDizh+GShSEzu1tZlo=
Subject key identifier:   99:D6:78:D8:E6:DC:67:76:5B:8A:9F:13:4C:61:AD:32:CE:78:88:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497363BA580DCFC7003C9200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41087996-a514-3e40-9778-b8950d481323.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396560
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:63:ba:58:0d:cf:c7:00:3c:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9638828c-96bb-4114-8e16-a39dc0421669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:b1:61:1b:cd:19:2a:93:07:64:d6:d3:7d:
                    db:63:4e:a4:a5:5d:72:85:49:8d:e3:29:b3:ac:0b:
                    a6:7c:2a:66:4c:07:61:d6:d4:1d:96:bb:e4:47:bd:
                    98:43:31:d6:6f:8f:9e:66:ce:27:bf:a8:66:f2:09:
                    73:36:dc:86:c8:e4:57:07:4a:d3:54:ca:94:1d:82:
                    c1:0c:9a:8d:ce:6c:a4:41:c9:bb:7c:0e:53:26:7a:
                    8f:bf:0c:c6:ae:39:da:66:a7:e5:43:5e:dd:63:a8:
                    2f:16:38:7a:82:f5:ad:b7:30:64:ed:14:d7:5a:18:
                    11:4c:d6:86:e9:7b:4d:bb:8d:d5:ac:f1:bd:87:92:
                    53:35:e2:cd:7c:75:5b:0c:51:89:c3:f9:42:11:0f:
                    77:85:41:11:91:06:10:af:63:57:e8:00:ac:31:8d:
                    49:d7:6d:12:ad:89:7a:a2:e9:c5:30:9f:fe:bb:2b:
                    79:91:02:1b:26:b7:4c:55:d4:4d:d7:37:bb:f6:e5:
                    32:4a:b9:ed:ba:95:ec:ce:a9:12:fd:ec:9d:65:c2:
                    39:d7:e4:92:2f:50:95:1d:4f:3f:cd:a5:86:48:06:
                    8f:c3:ea:65:65:66:02:11:1e:11:a5:2e:32:72:cb:
                    37:37:45:8a:58:4d:de:03:db:a1:3f:42:b7:d0:48:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D6:78:D8:E6:DC:67:76:5B:8A:9F:13:4C:61:AD:32:CE:78:88:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41087996-a514-3e40-9778-b8950d481323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:bf:e9:af:77:9e:5c:84:b1:94:ba:ce:e4:65:23:32:fb:55:
         ed:7e:51:4e:e9:e2:87:56:2a:bd:1c:0d:d5:1c:f6:d2:ba:85:
         f8:c4:97:9b:71:24:b6:f5:3a:ec:d3:01:4b:8a:91:c5:a9:65:
         31:f8:6a:03:52:5e:34:f7:2e:88:b6:0a:bf:ab:f9:9b:cb:2f:
         4e:9c:4b:4d:e9:b5:99:2f:f2:f2:4e:cb:aa:e4:69:4f:5a:49:
         80:b6:cd:52:43:73:88:d1:8c:78:19:1b:ba:50:c5:d8:9e:98:
         45:f5:52:e3:a6:b2:95:d9:74:d7:83:27:56:fc:af:31:3c:df:
         ee:d0:d0:47:66:7d:67:03:ce:01:1c:6e:0d:1b:3a:2e:9f:ba:
         ef:fe:97:ba:34:bd:e4:54:a6:20:dd:92:4d:56:92:77:d1:f8:
         9b:73:ec:45:e2:90:c5:5d:2c:ea:82:d5:38:c7:1e:47:7b:cc:
         68:1c:ce:7b:ee:10:18:b5:8a:a3:2c:f9:a2:21:8e:da:f9:11:
         fa:05:b0:e9:e9:53:b8:72:43:18:4f:de:99:f7:e9:17:6e:7f:
         90:66:93:eb:ed:40:06:36:08:be:0a:35:ac:00:a1:4b:02:78:
         9b:ee:4c:71:f5:74:7d:48:a5:d9:ec:2e:92:17:0b:42:d7:58:
         cb:87:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:55 2026 by rpki-client