Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4566e54f-9a5d-3b53-9f43-d82d1dec1649.roa
File:                     4566e54f-9a5d-3b53-9f43-d82d1dec1649.roa (raw, json)
Hash identifier:          t+awLKH0gl2zNZa/mKEF898uijQqZFThoAsXVxjqmms=
Subject key identifier:   4C:84:71:F4:65:29:52:AD:3A:0C:6D:BD:DC:16:D2:F9:5A:B7:D5:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B2099738288DA77C844880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4566e54f-9a5d-3b53-9f43-d82d1dec1649.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     396543
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:09:97:38:28:8d:a7:7c:84:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=d84a8f4d-474c-4dfc-b870-7b3424eecbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:4b:3a:a2:99:7e:50:24:ec:44:67:21:3b:
                    22:23:66:66:3d:9f:30:9b:c1:88:b5:fa:81:9b:cb:
                    8b:a4:42:48:f5:9f:ae:60:43:19:f1:27:b3:9e:1b:
                    63:2b:44:36:57:c3:de:aa:61:69:ec:e9:d9:ef:70:
                    b4:54:a5:a4:b4:44:3c:44:35:a2:ad:1c:19:d4:82:
                    54:46:0b:71:bf:ca:02:2b:8b:28:b3:e3:59:b2:9d:
                    e4:67:05:3e:fe:71:11:1f:29:53:75:f2:d5:5d:6b:
                    dc:ab:94:ae:e1:a8:ca:8a:92:67:04:4b:c6:4a:de:
                    e3:e7:57:92:9a:98:18:5a:16:f0:b9:4c:4e:17:5a:
                    ed:7c:bf:6e:4d:d6:a7:8d:3b:22:ae:85:95:90:41:
                    91:8e:be:c2:19:52:aa:f2:c6:c8:34:f0:e8:25:19:
                    39:49:15:d4:e0:fc:a3:89:10:a6:1f:23:f3:8c:73:
                    c7:69:3c:35:bc:dd:6a:15:f7:56:0c:30:0e:0d:c5:
                    82:be:b3:45:e5:10:98:7d:a7:74:9f:7e:bd:b6:68:
                    89:e3:bf:6d:5a:ca:6f:2b:0d:7b:f0:e5:82:4f:c8:
                    cc:0a:fa:92:5c:a0:ff:71:11:3e:6a:05:72:e1:bf:
                    54:3f:69:ab:ba:7e:7f:de:ae:bc:76:ed:68:90:30:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:84:71:F4:65:29:52:AD:3A:0C:6D:BD:DC:16:D2:F9:5A:B7:D5:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4566e54f-9a5d-3b53-9f43-d82d1dec1649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3d:06:da:15:8d:98:4f:ac:88:57:32:44:d3:03:29:17:d7:
         05:4b:a0:5a:a8:c6:35:fc:41:71:b5:dc:3f:d7:3d:10:08:d8:
         54:15:e7:39:50:91:8d:fc:de:fe:c7:a7:c4:ed:ca:3d:08:19:
         02:f7:49:b5:6e:4f:ae:f4:b4:48:49:fb:00:6d:49:93:4a:2c:
         dc:48:2d:51:8d:7a:4c:57:bf:a5:e0:30:e6:5d:be:0f:14:2d:
         ca:25:ae:2d:f8:a8:15:28:b8:51:cd:cc:57:05:8c:5b:d8:e3:
         50:00:64:ed:be:e1:99:bd:1c:dc:6b:48:3c:6f:44:e8:93:d4:
         57:fb:34:fb:ca:7f:6c:9d:f9:6c:fd:71:b9:aa:b9:95:50:a8:
         40:76:96:db:15:42:ce:57:19:42:9e:54:f8:fd:4b:a6:60:0a:
         bf:1e:a3:10:ae:c0:32:1b:8a:02:96:b9:39:07:db:09:fa:8b:
         87:ee:29:95:1c:b8:aa:ed:51:e8:20:63:e9:fb:62:aa:ab:76:
         2a:b5:4d:c5:a3:f1:c8:9c:7c:9c:ac:dd:c4:c9:7f:63:44:b9:
         e0:1e:9b:54:bb:2f:87:1a:bb:c0:3f:9b:54:af:58:0e:6b:bb:
         56:93:55:44:fa:02:74:e1:bb:78:63:02:9f:ca:ca:90:7c:d6:
         9b:d4:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:17:57 2026 by rpki-client