Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b14746a-3c39-3513-b3bd-2446a9845d06.roa
File:                     5b14746a-3c39-3513-b3bd-2446a9845d06.roa (raw, json)
Hash identifier:          U3mGZYbEVX7G0EKdGhD78dqaCcrt6WtnFcr3EwXvWIw=
Subject key identifier:   50:E8:D3:A0:2A:5B:6F:7E:F9:98:BA:C2:F3:F5:3C:59:EC:13:FC:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7BA9074AA568B6600A940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b14746a-3c39-3513-b3bd-2446a9845d06.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     397203
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:ba:90:74:aa:56:8b:66:00:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=5a6faa46-1824-43e9-b669-3c664288fe5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2a:93:42:16:be:40:95:f4:4d:41:f4:52:67:
                    bb:9c:39:90:a5:6c:05:f2:ef:69:a0:68:0d:49:6d:
                    7e:b6:21:ae:a7:30:06:6f:5e:25:84:d3:81:f7:23:
                    7e:c4:79:f4:08:4e:32:d0:b6:d1:4e:ff:57:58:ff:
                    1c:94:95:74:4e:b0:c0:8c:ee:63:09:78:ec:52:7d:
                    5e:ee:77:d6:ee:40:26:f8:21:c1:75:26:a7:60:b5:
                    fc:ea:fa:33:ea:10:6f:b8:ce:18:fa:4d:3f:82:6f:
                    ab:24:2e:ca:73:45:94:7f:d3:2a:01:41:ff:8b:84:
                    91:03:b4:34:7b:28:8a:dc:0b:c3:c3:d1:df:77:1c:
                    c0:2d:62:fd:7d:6d:f5:64:c8:06:53:d7:46:45:c5:
                    26:03:d1:5d:cd:24:cc:3d:95:73:5f:53:e1:95:0c:
                    f2:ef:eb:6c:40:c7:9e:8f:05:8d:b5:29:b6:e1:8f:
                    22:4f:f1:78:d7:9f:5b:93:49:91:4a:01:6f:34:56:
                    17:8c:64:46:4f:65:bf:13:e8:2e:5a:9f:60:98:f1:
                    7d:ab:f5:9d:63:64:85:b7:83:64:05:78:a8:36:4b:
                    6f:0f:87:e3:62:0d:e3:21:61:b4:0f:c8:3a:72:b9:
                    6e:da:30:fb:90:de:c5:fb:0c:ed:36:6b:03:95:79:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E8:D3:A0:2A:5B:6F:7E:F9:98:BA:C2:F3:F5:3C:59:EC:13:FC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b14746a-3c39-3513-b3bd-2446a9845d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:43:6a:5c:8e:af:92:0b:4e:a6:4d:08:ff:dd:a7:bd:45:29:
         e8:02:1a:99:67:4d:66:90:4f:df:a6:61:f3:f7:54:6e:a5:8e:
         28:10:55:33:35:ed:12:1d:47:ca:53:77:c2:49:68:98:74:dd:
         d5:4a:c8:1f:ca:67:f5:b5:ee:e3:f5:09:3e:11:53:90:4c:d7:
         9f:66:5d:d2:c0:73:fb:ff:7b:6d:2a:b4:2d:fa:50:c1:86:de:
         d1:7f:69:39:c3:6a:c9:11:8f:8f:0b:fc:89:18:e2:e7:41:1b:
         8a:69:df:6e:50:7f:91:01:8c:07:62:9d:48:4c:5d:07:0f:72:
         5a:1a:0d:b5:b2:42:c2:75:c3:70:30:08:80:b7:bf:d4:aa:a2:
         92:59:65:93:04:96:53:ff:a7:16:af:28:29:8a:d5:91:4d:d2:
         7c:a7:92:66:10:24:0c:4b:0e:82:1e:1d:28:f6:ee:f0:50:a7:
         74:a2:dd:20:97:a8:d9:49:dd:9b:ea:e0:f3:91:f6:4c:3e:6c:
         ce:10:48:e2:49:54:11:08:74:c4:64:6f:9b:7e:1c:30:54:f7:
         e2:ba:fa:34:1a:8b:77:3f:78:35:71:65:cd:89:37:5f:cd:70:
         4f:c3:5c:f8:93:24:e6:a7:c5:21:68:dd:44:b1:25:3e:47:64:
         43:26:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:54:06 2026 by rpki-client