Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4636d96a-7bbd-3e99-9e38-747305b4492e.roa
File:                     4636d96a-7bbd-3e99-9e38-747305b4492e.roa (raw, json)
Hash identifier:          xBSPlsmzxqf6Xa27/B4Yj9Nu4ctBB6FtqW/VKh2ZoYw=
Subject key identifier:   17:A1:72:5D:59:92:48:4E:2A:49:08:B1:D9:23:53:D7:D0:16:CE:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49862FC926312119B869B380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4636d96a-7bbd-3e99-9e38-747305b4492e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36630
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:2f:c9:26:31:21:19:b8:69:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fa2d1298-9788-4e9e-b610-d2a9a90833cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:9c:88:de:d7:1d:59:ae:96:1c:ab:4c:3f:
                    60:81:e3:0e:32:04:06:7b:b3:c0:37:a3:e2:38:16:
                    e7:95:a0:b5:18:d2:4a:54:f4:c4:87:13:a9:8b:ed:
                    e7:8e:7b:3c:e9:a6:79:67:b1:0e:ff:79:4e:03:66:
                    28:ee:b9:48:bf:3c:3f:d1:db:db:97:bf:23:e5:a7:
                    0d:71:ff:ac:30:4d:96:c0:8c:ba:ea:61:33:78:b7:
                    58:76:b7:f6:c0:54:bf:ed:da:38:84:2c:5c:78:6f:
                    6e:fd:b7:cc:4e:59:da:8c:fe:0e:f1:71:3c:78:da:
                    c4:17:d7:fc:b5:22:7a:cf:df:f1:3a:64:e1:98:9c:
                    59:d4:72:42:fa:a9:dc:77:04:16:25:30:8a:24:82:
                    38:bf:b4:d3:a2:08:d7:88:c0:1a:d8:18:fd:fe:74:
                    0e:c6:9f:5b:9d:8a:31:90:99:30:72:10:d1:d1:c6:
                    58:24:58:cf:5a:7c:4f:b5:81:0f:ac:6b:5f:8b:69:
                    36:9d:f0:2b:69:8f:52:3a:4e:56:cf:52:50:ce:de:
                    6a:4c:64:b5:56:bb:21:5d:50:de:be:d7:33:53:87:
                    5b:db:83:82:27:24:29:44:a0:cd:08:d1:ee:f6:41:
                    75:9c:a2:34:c5:13:43:66:7c:08:9b:a2:64:b9:f3:
                    cf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:72:5D:59:92:48:4E:2A:49:08:B1:D9:23:53:D7:D0:16:CE:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4636d96a-7bbd-3e99-9e38-747305b4492e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:16:fa:19:cb:3f:29:e0:59:7c:29:99:67:2c:55:d6:7d:
         73:97:b7:0b:fe:7b:d5:9a:0b:fa:f0:7e:f9:1f:68:f7:25:25:
         82:38:ff:eb:15:8f:f5:c0:3d:05:50:67:b8:67:19:a7:09:31:
         58:5e:e0:47:83:3d:af:ff:03:2d:e3:24:4b:32:d6:3b:77:42:
         49:90:f6:0e:37:c5:38:f7:b7:78:a5:ac:6a:18:50:ee:a1:02:
         19:64:56:12:5d:f8:8b:90:9a:fd:e8:d8:7e:fc:f0:21:58:ce:
         77:85:9d:3c:42:ff:46:28:32:5a:4f:46:fd:0f:22:25:89:f8:
         9c:37:73:b3:f6:47:0d:2c:90:15:76:af:71:29:8d:86:ac:1f:
         70:a0:5a:81:2e:3f:b2:ed:f1:cd:4a:2e:8b:37:21:6a:98:b3:
         8e:79:3f:13:63:44:a8:8c:fa:9a:9b:2a:4d:30:c8:c5:7a:22:
         7b:6b:b1:51:46:1d:33:ea:5d:1a:15:c2:3c:99:60:ce:57:4a:
         67:04:ce:3f:ec:60:fa:f8:5e:6a:1f:02:83:43:3d:fc:25:36:
         5a:88:33:43:1b:8d:9b:46:50:2a:ad:c6:42:f3:56:77:27:98:
         e4:c3:d5:e2:08:96:d6:c8:9c:ad:8e:5e:0f:4b:fd:59:c8:e8:
         9c:01:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:14:05 2026 by rpki-client