Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa
File:                     4dd18853-9849-3b14-af0e-6f802d6338d4.roa (raw, json)
Hash identifier:          zb7g8yitq6IX6q1U764rQcJFRwdkPcL58AOaqyplvPU=
Subject key identifier:   A5:6F:1A:89:2A:5C:38:1B:5C:5A:07:F8:08:3A:0A:61:A5:4E:00:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4987F8A204F164BF6A66BFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396587
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:f8:a2:04:f1:64:bf:6a:66:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=18f765d5-b498-4b75-a148-4b47de060e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:e6:d0:0f:43:c1:18:bb:e1:c0:a0:9a:44:
                    7b:0a:24:c5:0c:5a:2e:7a:1b:5b:ec:dd:14:37:68:
                    e9:8e:69:49:38:e4:06:cf:f8:35:8b:18:84:50:dd:
                    5f:55:5f:03:bb:7c:28:d0:81:0f:d4:ec:1c:cd:72:
                    52:df:bc:9e:eb:cd:58:4f:10:d4:eb:7f:af:aa:db:
                    d5:4f:73:4a:d2:f3:fe:22:19:c8:79:82:76:71:c3:
                    8e:ae:9c:7c:75:73:63:f8:16:8e:a4:49:27:13:ae:
                    11:3b:ad:03:c9:2f:13:7a:37:83:e5:b0:dd:76:cf:
                    37:58:cb:e4:78:d4:58:58:00:10:4b:b2:26:de:77:
                    8d:3b:3f:b5:38:58:a9:69:22:65:a1:b7:8a:00:ce:
                    81:d3:11:60:ae:98:5c:37:58:51:0e:0c:e3:e2:6d:
                    93:0c:a9:d5:6d:65:9b:78:0b:4f:c5:83:61:fa:72:
                    49:7a:45:2c:c8:8e:e3:37:fa:7a:4e:53:64:02:a8:
                    10:4b:98:97:c8:3a:21:a4:9e:17:0c:c2:c3:d9:d2:
                    c6:15:9c:48:46:86:82:1f:aa:90:7e:86:e8:48:06:
                    0f:e1:e6:dd:35:b2:71:e9:cb:81:89:3c:5b:8c:e4:
                    99:e5:2f:a0:83:c6:31:07:6e:b1:06:0f:7b:86:7d:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6F:1A:89:2A:5C:38:1B:5C:5A:07:F8:08:3A:0A:61:A5:4E:00:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:66:6c:5a:48:e3:90:6b:b8:89:59:e1:9a:ca:5e:26:9d:
         16:8f:7e:6d:78:ea:72:58:4f:a5:c8:d3:e0:e0:6b:3f:47:7b:
         f4:69:f4:87:15:16:04:d1:4e:7e:1c:0b:dc:de:09:2d:bf:14:
         f8:04:f0:a8:fe:5f:db:30:80:77:c2:1b:a9:4e:c4:4d:87:d6:
         e5:a2:a6:16:7b:14:ce:df:dd:5e:5e:2a:96:2c:cf:09:f1:18:
         93:e4:9d:fc:5c:be:3e:e3:4f:19:ca:6b:64:a0:c4:10:7c:8c:
         9b:73:ab:2a:a7:45:da:4a:68:94:ff:12:64:f7:9e:b3:0f:79:
         8d:45:a2:ef:be:cd:b6:d9:7e:65:fb:b0:b1:68:ee:14:c2:b0:
         69:b5:9e:7b:12:50:d3:9b:82:0b:be:08:33:c8:1d:2a:dc:f3:
         9b:32:4c:e5:e2:7d:e7:a2:22:ef:17:74:0e:80:f9:46:79:94:
         64:29:ca:cc:8b:86:7f:fd:e2:cf:96:9d:a5:55:bb:e4:d6:a3:
         ee:e2:68:9f:fb:80:41:45:95:98:44:f8:87:cb:8e:d5:f5:34:
         81:59:b9:5b:2d:62:cd:8f:9f:d9:01:60:be:a7:8a:85:d6:39:
         d9:43:42:b1:21:89:12:77:49:cc:c3:33:81:02:48:27:28:79:
         11:73:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:24:30 2026 by rpki-client