Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa
File:                     53db66ac-6a18-3801-849d-20f1f36c2143.roa (raw, json)
Hash identifier:          6zEIWlxSLfinCe5FKd0AnE1yakaqoQF6+JGqAN+CinI=
Subject key identifier:   DB:68:23:E8:A4:DA:3C:D3:6E:76:E1:68:7E:DB:C7:D8:30:85:47:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727153EA8C55B92F835CB8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     20362
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:71:53:ea:8c:55:b9:2f:83:5c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=a8baa3c7-0f5d-4e3e-a468-598f1000dc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:de:01:e6:cf:f1:7f:44:20:fa:ae:31:cf:3a:
                    6d:9e:36:3d:43:61:08:bf:c4:3f:0e:5e:45:7f:85:
                    bc:ff:93:c0:4a:6b:6b:4f:b5:25:c8:df:7a:2d:6b:
                    ee:58:c8:e2:3f:eb:9b:a7:ae:5c:43:ff:82:25:42:
                    ad:40:e1:09:00:55:9b:50:62:1a:4e:9a:b6:d7:53:
                    c5:9e:d7:d2:b8:9c:22:4e:5d:61:06:bb:f8:01:12:
                    ec:b8:2f:e0:fa:ac:5e:4e:b9:f8:f1:de:9f:99:3c:
                    70:78:62:c7:63:c1:7d:89:e1:09:7b:12:fe:25:e0:
                    73:e4:f8:1a:aa:b3:88:e6:c8:61:5b:7e:10:92:09:
                    64:87:b4:34:f1:eb:54:d5:0b:c7:dd:ce:94:ac:75:
                    04:5d:e0:30:7e:01:07:8b:61:e1:3a:f4:c8:3f:cf:
                    33:b6:c0:6e:00:5d:d3:b1:76:dd:73:e1:d1:c8:8f:
                    5c:1a:65:41:4f:0d:a3:c5:d5:33:77:ac:35:cf:34:
                    fb:c7:b9:e4:1c:68:46:e9:fd:6f:79:de:c9:ed:c8:
                    60:c0:f8:05:db:f7:47:6b:79:09:94:05:42:26:26:
                    f6:21:f3:1b:c0:af:c0:f6:4e:f9:cf:72:8e:e9:bc:
                    30:3b:b6:27:0a:a3:df:19:51:74:05:0a:1e:57:be:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:68:23:E8:A4:DA:3C:D3:6E:76:E1:68:7E:DB:C7:D8:30:85:47:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:47:08:0d:0b:f6:e7:f4:a3:bc:8d:7a:f3:65:d9:44:c6:73:
         9f:ac:85:79:ef:f1:56:a7:bd:15:06:6f:6d:0c:ff:45:1e:a9:
         4f:be:65:0c:fd:c0:d1:b0:5c:06:4b:c3:ba:77:96:3e:31:fd:
         92:17:a8:33:9d:0d:a6:89:82:3a:9d:b9:ab:98:68:34:f7:10:
         65:29:c3:4c:5d:31:0e:e2:70:20:bf:ee:e6:fd:a4:59:e7:8a:
         6e:65:bb:77:a9:99:c7:e9:bb:b5:e7:8a:d3:06:bf:29:b3:ea:
         34:87:1a:53:de:c7:84:3b:61:dd:f6:cf:00:47:40:ad:d3:dc:
         bc:a5:f0:5c:17:cb:50:ea:e1:ba:1b:06:d5:a7:4c:5f:2b:69:
         b7:54:b2:59:5f:f8:69:e9:a8:cb:9d:3b:d5:3a:47:93:f6:16:
         92:2a:98:ac:ee:96:36:bc:3c:78:5c:63:09:47:8b:f2:04:51:
         85:68:c8:f9:5f:00:65:70:6a:26:49:e8:03:0a:a7:8a:d0:ed:
         1b:8e:f3:5b:c5:bf:84:ee:71:78:f0:06:7a:cf:ea:2e:80:95:
         e5:4d:11:9f:31:d3:95:1d:01:a6:9b:12:07:a0:d3:15:6b:06:
         77:27:ac:4f:ed:8d:87:9c:32:17:db:50:fb:6f:ea:2c:b4:e6:
         8a:f5:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:57:44 2026 by rpki-client