Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b43f966-b427-39b1-91d3-53012d30c67a.roa
File:                     4b43f966-b427-39b1-91d3-53012d30c67a.roa (raw, json)
Hash identifier:          B5IgWgfmNafdJeRy+PKl/YYMPH9v2/ZPr26fGg1bUjA=
Subject key identifier:   7D:6B:90:8B:7A:9A:D9:FE:AF:53:EF:AA:D2:8C:6E:0E:8A:88:EE:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498633E92AB80E6092CC0000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b43f966-b427-39b1-91d3-53012d30c67a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396612
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:33:e9:2a:b8:0e:60:92:cc:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5ac79716-3296-4ec7-9a18-f44c4d83bf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:67:c7:64:5d:10:4f:71:be:e4:f9:a5:60:
                    6f:d4:7e:92:13:10:d9:a2:ae:88:bc:22:0a:61:7c:
                    5c:b2:00:8f:09:ec:95:13:1b:bd:06:1f:40:64:24:
                    39:29:2d:f6:0e:35:5a:fd:1e:cf:d0:f7:af:a9:7c:
                    dd:b7:1e:36:52:43:7d:9c:06:2a:f0:65:a3:5f:95:
                    06:75:eb:fd:e0:21:d3:c2:2d:32:a5:42:0b:aa:a7:
                    9f:e1:6c:6a:4f:26:21:a9:76:6e:41:d3:d0:4d:1f:
                    9a:41:6d:63:96:7e:c1:56:e3:4c:a1:39:0e:09:1f:
                    35:d4:c8:a9:28:4c:40:14:65:db:25:35:01:55:0d:
                    3f:43:e9:8a:bd:21:d2:d5:11:69:d0:81:8d:2a:96:
                    f7:84:86:89:34:bc:71:6b:74:c2:06:70:0d:a8:47:
                    a5:85:7a:56:b8:74:ca:f9:eb:8b:93:d9:b4:94:10:
                    b0:ab:54:40:7a:48:af:b6:e6:b5:2c:d0:97:25:29:
                    48:b6:20:d0:46:91:b3:77:73:ba:5a:c5:75:4e:7d:
                    22:85:01:01:b9:06:3f:ef:82:aa:c7:cf:3e:da:63:
                    5a:d8:c6:63:f9:fe:a4:ba:80:3e:9e:b4:97:61:85:
                    2f:ac:86:e6:fc:74:34:2d:24:7d:ad:92:d7:c7:54:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:90:8B:7A:9A:D9:FE:AF:53:EF:AA:D2:8C:6E:0E:8A:88:EE:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b43f966-b427-39b1-91d3-53012d30c67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:70:e3:1f:fc:69:0f:d1:4b:7c:9c:52:aa:fa:2f:3a:30:cd:
         87:26:5a:fa:b4:c5:bb:37:fc:69:c7:e3:36:5a:dd:0c:b2:c9:
         08:48:8f:3b:1f:ba:c3:14:59:76:47:24:05:1f:24:14:54:ec:
         3e:cd:3a:43:96:49:b5:a4:cb:3f:5d:92:e6:e7:47:85:b9:6b:
         1b:46:d0:23:57:a8:2d:a1:c6:3f:7f:6d:c7:2d:fa:65:63:cc:
         f2:a5:e0:26:ee:85:ac:50:ae:cc:13:87:2b:f7:65:a3:4f:d1:
         a0:c7:5f:73:ee:11:73:96:f9:25:4f:2e:1d:56:5b:aa:4d:06:
         a9:9b:dd:88:85:e4:2c:22:1c:9e:eb:ce:4b:91:10:0b:1d:91:
         da:b7:e7:f0:1b:82:d3:de:27:a9:7c:a0:8b:4a:6f:52:c2:40:
         81:a6:73:32:fe:38:c9:49:ca:35:50:27:d6:ed:45:b8:5b:22:
         56:30:9d:66:2d:7e:5b:f5:5d:c7:1d:7d:45:22:39:de:1c:c3:
         b9:13:38:8f:4c:70:b7:90:eb:69:dc:0c:7b:6b:91:97:be:20:
         6d:61:6c:e7:c2:9d:49:92:07:cb:11:c6:bd:56:06:88:da:8a:
         6a:e1:4b:91:df:90:0d:1f:24:46:0e:a8:90:e5:11:17:0e:4f:
         bd:e2:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:15:51 2026 by rpki-client