Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52cfa60f-44af-3e80-a177-34945a4533ad.roa
File:                     52cfa60f-44af-3e80-a177-34945a4533ad.roa (raw, json)
Hash identifier:          h3fPxKVefUSyJAV1Sk51M2ufgDOPv/kxwJksz3ZyDvk=
Subject key identifier:   BE:A8:2B:30:95:9A:79:37:AE:A1:37:93:69:AC:09:06:53:6C:C7:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F103795ECCA0050401D2303E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52cfa60f-44af-3e80-a177-34945a4533ad.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396605
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:95:ec:ca:00:50:40:1d:23:03:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=5763f548-cc51-4ffe-a204-e7f0584579e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:53:66:16:0a:6e:90:e5:d3:6b:2f:0d:5a:
                    17:72:f5:7a:7f:2a:f8:86:f7:fd:0f:99:76:7f:7d:
                    6d:62:80:b9:fa:20:57:77:83:70:0e:d0:a1:6e:72:
                    59:0d:9a:b1:d6:51:9a:01:3b:90:6d:7b:c5:6e:36:
                    70:63:28:bb:4a:b2:10:c0:14:26:81:38:97:fb:53:
                    fd:e1:73:01:d7:28:aa:7f:b3:92:b2:ce:23:fb:55:
                    b1:89:08:7e:9a:db:4e:04:e9:4a:8e:16:41:f1:61:
                    76:06:a1:2b:cb:46:64:a5:a3:7e:b5:91:d0:94:15:
                    20:90:dc:82:3d:6a:5b:2d:85:df:c2:22:72:06:c1:
                    c4:7b:04:54:11:b1:00:e5:d6:b7:d2:d6:26:27:5e:
                    f3:38:f4:10:cf:72:61:87:bb:7d:b8:d4:69:06:9f:
                    cf:6c:44:c4:34:9b:36:0c:c6:99:e8:8c:23:e1:e5:
                    62:5b:13:0c:be:51:68:27:08:bb:e9:26:e9:7e:63:
                    08:b9:e7:48:61:a3:c1:da:3b:f1:b8:c7:6c:92:81:
                    d1:47:42:96:dc:0f:8a:23:88:2a:4d:5d:51:a0:a1:
                    0e:c3:bb:f8:01:63:5d:3b:88:c8:18:89:0d:7c:5c:
                    cc:c9:d9:4d:8a:81:22:89:03:f4:b7:ab:b9:d5:fc:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A8:2B:30:95:9A:79:37:AE:A1:37:93:69:AC:09:06:53:6C:C7:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52cfa60f-44af-3e80-a177-34945a4533ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3a:01:04:f8:50:cc:4c:65:32:56:dc:8b:c6:f4:09:cd:44:
         86:4e:44:08:ab:55:50:db:44:5c:66:bc:b0:25:79:f1:79:bc:
         4e:ad:b6:ac:45:9b:ea:36:d0:a7:ad:85:48:92:53:8b:fc:57:
         af:a2:f2:19:b2:8f:7b:9b:52:93:74:a8:65:8f:bf:aa:aa:c2:
         02:eb:7d:20:ab:6c:ae:5c:ff:f4:e9:7a:69:80:1e:f7:5e:4a:
         d5:98:e4:e8:75:ea:e3:49:b0:50:0e:a6:06:b8:cb:40:b6:49:
         3a:32:d6:73:99:a4:d0:a2:3d:33:cf:1e:19:a1:57:5b:09:fb:
         55:28:57:4a:91:96:d7:e1:c7:1b:83:36:76:3d:5b:48:48:4d:
         5d:95:3b:9c:b0:96:52:10:2e:19:ef:dc:02:1e:6d:bc:e4:6f:
         20:68:c6:5f:44:03:45:32:de:ed:fa:3a:b4:e4:ad:d2:b9:7b:
         32:30:2c:0c:57:b1:e8:cd:43:5e:57:e4:6d:82:99:09:ed:e6:
         7e:29:f7:e9:a9:37:3e:26:6b:01:58:b6:8c:01:60:34:38:35:
         01:60:fb:00:47:9d:c9:14:0a:50:56:47:5b:ed:0d:7d:fc:93:
         ff:b3:2f:f1:73:43:f3:a5:55:17:e1:56:53:1e:e9:b1:c8:a1:
         ac:79:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:11:35 2026 by rpki-client