Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5063fb82-e181-344d-bd3a-20745aa07c73.roa
File:                     5063fb82-e181-344d-bd3a-20745aa07c73.roa (raw, json)
Hash identifier:          U6i990JMEtWz1T3Pb3w9pDZfzC2DywZvYjcuERG1cNU=
Subject key identifier:   F8:F6:02:DC:47:31:48:8B:79:9E:90:D3:34:DC:1A:D8:47:2B:19:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7BB0FD7BBDE51114C5660
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5063fb82-e181-344d-bd3a-20745aa07c73.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396543
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:bb:0f:d7:bb:de:51:11:4c:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=2bf173ae-c45e-4dec-85a0-4a72def09740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:54:eb:59:9c:d3:83:e6:31:8e:b7:4e:57:6c:
                    fa:de:ae:72:dc:9c:1d:d6:35:57:78:10:5f:c4:0c:
                    23:77:29:58:4b:8a:0d:38:c3:5c:15:c3:3d:18:b4:
                    b3:fa:1f:18:59:88:8e:43:ea:68:b3:cf:c2:22:ec:
                    01:34:2c:33:93:4e:a3:fe:ce:2c:9f:66:e9:ba:e0:
                    2b:7b:18:fc:f2:ea:a9:79:51:27:47:32:ed:aa:b3:
                    ac:0a:ef:16:78:c7:77:fb:7b:8e:d8:7d:da:8a:1b:
                    f8:51:d0:05:48:d3:01:47:cc:de:09:4d:64:e5:cb:
                    2c:be:ff:2e:76:8f:c6:7f:4d:80:6b:27:b0:d6:17:
                    d3:83:c0:33:62:0e:ff:e0:9e:ee:c3:f4:cd:fe:35:
                    ef:a3:91:90:ac:05:f2:30:20:9a:61:8e:1e:3e:d4:
                    40:d3:be:e2:7a:b1:3a:83:14:e6:f9:42:3e:dd:0c:
                    58:05:6a:72:a5:d0:d3:d9:73:3b:f3:57:94:7c:f1:
                    63:f2:e9:5f:ae:6f:c3:aa:dd:a0:10:75:80:7f:c1:
                    13:a0:15:e4:61:d6:7a:8c:8c:57:6f:90:48:0e:bb:
                    b6:7b:b6:31:bb:e5:89:ec:95:7a:fa:af:e9:34:2d:
                    46:27:26:a4:ab:f4:d7:24:fc:87:f2:31:9d:72:30:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:02:DC:47:31:48:8B:79:9E:90:D3:34:DC:1A:D8:47:2B:19:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5063fb82-e181-344d-bd3a-20745aa07c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:17:1c:2c:a5:c6:88:40:09:9c:ad:e8:73:43:4f:46:5c:98:
         f3:1b:a3:92:f5:27:1e:63:c8:bc:e7:c7:18:e3:c5:dd:16:de:
         a8:d7:85:97:3a:99:fd:84:dc:4b:52:3e:1e:54:a9:c9:b6:b3:
         57:1a:84:c8:47:cc:4d:58:da:59:fb:4b:3c:0a:4e:b8:16:c6:
         52:a6:33:08:c9:da:5f:ee:f0:39:d8:14:40:88:18:96:fc:b2:
         a2:2a:f5:1c:12:18:65:ab:91:c8:01:92:33:58:a7:85:fc:18:
         64:39:2c:00:74:e3:32:1e:f8:40:99:a4:ed:af:6e:d6:96:d1:
         9a:18:cf:c0:84:3e:ee:76:9b:6c:09:f6:8c:65:16:ba:f0:21:
         df:e9:56:46:37:71:94:04:81:21:ff:ee:f7:56:37:78:25:33:
         02:9c:b3:93:c5:d2:92:36:2b:51:6e:41:e1:d5:ca:05:9e:fd:
         53:59:00:d5:22:83:02:ff:29:93:3c:12:4b:0f:8f:f7:27:cf:
         ec:1f:77:a9:bb:6f:04:31:b4:67:01:8a:21:81:de:34:4d:06:
         25:bc:e2:f6:2b:6d:80:0c:96:16:26:cc:5a:31:69:ba:ec:14:
         56:07:72:14:8b:af:8f:ee:18:65:b6:c8:a3:88:48:85:0f:6d:
         ae:fe:3d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:38:42 2026 by rpki-client