Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5523c62b-7cad-3489-92b8-309c1e1bbc97.roa
File:                     5523c62b-7cad-3489-92b8-309c1e1bbc97.roa (raw, json)
Hash identifier:          CHDPnb4LpzWFn2SRi5IXNlUWI6SN1QJFjxC1/80VDU0=
Subject key identifier:   F1:50:22:6C:B0:59:77:94:5E:07:E2:62:F4:D6:5C:2A:39:3A:13:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CE5C89C06B04360445B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5523c62b-7cad-3489-92b8-309c1e1bbc97.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396546
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e5:c8:9c:06:b0:43:60:44:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=17b0bdcc-c1d1-425c-8983-33a8039bb7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:2d:6f:5b:8d:7e:d8:3d:ff:05:2b:99:bb:
                    d4:59:0f:e7:d4:dd:69:9c:18:c8:3a:85:67:e1:a1:
                    c1:47:74:1e:b3:1f:21:ff:a2:4d:a6:6a:87:b3:66:
                    34:3e:c2:97:fd:f7:01:f8:5a:19:62:8e:70:26:26:
                    da:af:6c:9f:ba:b2:69:9d:1a:60:e6:69:ea:f3:9b:
                    91:a4:1e:22:be:e4:6b:cd:f8:8f:b7:a0:e6:17:8f:
                    70:32:d5:7c:be:4c:a0:4a:00:7f:6e:f9:66:b4:e5:
                    ed:c9:8d:a8:f0:aa:57:4d:5f:77:c8:41:d0:8e:3f:
                    29:e9:c8:8f:79:bc:37:c8:17:e0:cc:73:33:52:70:
                    7c:c1:67:39:13:b0:88:f9:fe:b7:f8:b8:a8:35:ee:
                    60:94:45:ee:aa:82:c3:9d:8b:20:87:49:15:20:54:
                    73:44:57:8e:b8:74:71:3f:88:3c:47:88:d9:2d:8a:
                    5e:33:16:ca:05:38:64:4d:3d:a6:87:27:1b:a2:2e:
                    34:46:ac:55:1e:da:8d:19:5c:b1:b9:19:a1:37:ad:
                    f7:2a:e1:28:5a:d8:3d:eb:c8:c5:6d:76:34:5a:e8:
                    c4:fb:bf:14:ef:08:6d:fc:aa:af:ca:cf:73:c2:bf:
                    f8:a6:e6:28:02:2a:0d:22:ed:37:51:02:20:31:41:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:22:6C:B0:59:77:94:5E:07:E2:62:F4:D6:5C:2A:39:3A:13:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5523c62b-7cad-3489-92b8-309c1e1bbc97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:36:75:8c:8e:42:9f:d0:14:b0:10:2f:ed:81:1e:f1:d2:
         15:4a:7f:e0:8b:78:ec:a5:00:d3:8f:83:74:2a:32:df:86:b6:
         a6:73:32:e3:8c:13:ff:d9:d2:8b:81:c7:c1:0f:47:ff:97:03:
         97:cb:c3:e4:c3:40:b2:f1:28:7b:52:3f:a5:6d:47:1c:8b:dc:
         52:bb:31:5f:b4:01:2c:fd:57:db:5e:e8:9c:6b:1e:45:5e:ea:
         29:c5:20:85:5e:91:9f:e1:7f:ea:89:c5:9f:93:c9:b8:20:c0:
         a3:e3:c8:8b:72:c8:cf:71:e4:f6:44:ca:8d:25:60:2b:9e:cc:
         b5:9e:14:a2:94:06:22:ea:23:ab:d4:c2:87:2f:0b:c2:a4:1f:
         92:9b:19:b7:b7:04:d2:c3:88:db:96:61:55:fc:a2:c1:0a:3b:
         af:0e:06:5d:f9:2b:cd:26:50:dd:66:c9:87:d2:8c:04:60:79:
         39:2e:39:10:22:31:8c:b4:96:b4:34:c1:07:fa:9a:dc:49:79:
         cb:53:40:50:75:9c:b4:12:7e:ab:41:b2:00:cc:4c:fe:20:8f:
         b9:73:a0:2e:01:1a:8e:bf:e6:ad:a0:83:aa:b7:4d:2e:ef:e6:
         dd:5f:9c:a6:0f:48:88:84:3d:46:16:fa:35:42:d8:50:d5:62:
         fd:3d:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:57:48 2026 by rpki-client