Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51453fa4-8520-3c63-9926-bf9c5a1c625e.roa
File:                     51453fa4-8520-3c63-9926-bf9c5a1c625e.roa (raw, json)
Hash identifier:          lf3G4jLctgYgQswVwP+oZ8x7HpMfAugUC48QfjxuIJ0=
Subject key identifier:   D1:4B:8A:AC:AC:23:FC:C9:31:55:7D:D9:EF:3B:38:D7:CB:7F:B8:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498BD077D52B931FA9144280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51453fa4-8520-3c63-9926-bf9c5a1c625e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396604
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:d0:77:d5:2b:93:1f:a9:14:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4307df41-c503-4b4e-b40d-deae33d071aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:a2:11:cf:b2:84:5a:84:62:5d:4c:0a:12:
                    81:db:99:c5:d1:05:13:fa:b3:a4:d0:de:ae:5d:02:
                    2b:40:b2:7c:b2:28:9e:ef:b4:bb:c1:26:e8:d7:af:
                    a2:e8:ec:cb:40:3c:02:52:62:1e:24:2a:c6:65:88:
                    62:01:c4:08:07:71:56:97:30:57:92:8b:6e:6f:f1:
                    06:96:7e:20:49:c2:73:89:98:d4:22:b5:b4:96:3e:
                    94:da:dc:99:2a:a6:27:ae:14:17:90:ec:d2:4b:31:
                    8b:e2:72:57:a2:c8:02:8a:73:b8:19:3d:da:6f:d4:
                    9c:3f:4c:94:d2:2f:25:25:65:bd:6f:f8:f7:3b:a8:
                    ff:37:24:fa:78:1b:37:d7:00:a1:4d:a6:53:70:77:
                    51:04:2f:87:fa:c2:e1:1a:54:29:77:f8:94:b1:86:
                    da:53:2c:4b:ed:2e:f7:ae:14:57:b7:1d:37:28:06:
                    2a:fa:55:77:45:6d:16:9a:e5:ce:c2:6f:04:9e:45:
                    49:10:09:f1:de:e8:46:aa:52:12:6f:e5:af:66:e5:
                    55:6c:de:3b:95:8a:fa:09:91:d2:ec:f5:9c:19:a1:
                    c6:2b:99:b1:25:db:75:78:cc:9d:c7:ac:3f:4e:5f:
                    8c:7e:b7:77:42:d3:3f:f0:c3:f5:6b:7e:4e:9e:c2:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4B:8A:AC:AC:23:FC:C9:31:55:7D:D9:EF:3B:38:D7:CB:7F:B8:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51453fa4-8520-3c63-9926-bf9c5a1c625e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:2c:11:d7:8e:5f:58:6a:3c:f6:81:3d:68:3a:18:a2:31:
         bb:de:4d:10:f0:17:8a:54:f0:1a:fe:ff:a5:fb:5c:96:60:fc:
         7c:f3:88:78:cc:f8:4b:96:f6:13:96:5c:72:0e:14:d0:ab:4a:
         a7:ca:04:7a:84:d6:4b:a2:43:ec:f6:27:20:54:e9:77:fc:2f:
         13:c2:dd:ab:01:32:1a:10:cd:aa:39:47:29:58:73:2f:5c:1d:
         57:72:e8:e2:21:3e:47:c9:53:26:72:3f:1d:0c:c8:62:81:04:
         3e:4d:5f:82:1d:dd:d7:d6:9d:f5:e3:10:ed:ca:f9:dd:91:ee:
         b8:8b:f3:f9:1a:b6:77:35:43:52:ee:84:b0:1b:85:02:fd:37:
         0b:58:7a:c4:09:6a:39:1a:a4:6a:e8:47:70:de:15:45:89:6b:
         cb:e8:fa:75:bf:18:56:43:23:94:26:60:db:69:70:dd:55:24:
         92:cd:50:64:be:c0:b1:0a:d9:56:30:d7:68:05:e7:8f:92:ec:
         f7:78:7d:8e:ae:d0:c3:da:27:32:e3:ba:36:80:ee:ac:66:98:
         1d:37:02:01:dd:21:8b:17:14:ea:14:74:dc:b4:47:4a:30:81:
         a6:23:77:d4:8e:dd:af:24:bc:70:01:3f:d6:73:85:e6:09:5b:
         69:19:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:48:30 2026 by rpki-client