Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d4dc95b-2907-3858-a12f-eb8b86917a64.roa
File:                     5d4dc95b-2907-3858-a12f-eb8b86917a64.roa (raw, json)
Hash identifier:          gB3NJ5L0eqs5RIlNSlSDAxcaeMh1juRcOlZ5QYg3TtY=
Subject key identifier:   6E:9F:7F:1E:22:CD:1B:2F:AC:93:6F:58:0F:EE:68:F1:79:8D:87:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728A97C6459A745DD49A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d4dc95b-2907-3858-a12f-eb8b86917a64.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397193
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:8a:97:c6:45:9a:74:5d:d4:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f57ff2d2-7b3f-4fe6-b79b-0c6fce8117db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:be:89:b2:e1:01:22:f2:ff:52:e3:ed:12:
                    7c:e5:0c:0e:e5:c2:fe:14:4a:e4:31:89:2a:50:08:
                    5a:8a:b2:fa:54:d5:f7:55:42:62:aa:b9:7a:2e:87:
                    45:99:ed:bd:db:ab:49:a4:4e:86:99:f5:24:55:88:
                    97:b2:e9:93:75:24:27:f5:3e:24:68:7c:be:36:93:
                    7a:8b:ef:74:ef:f2:ff:5a:2d:b9:09:5e:7f:c8:3f:
                    13:4a:a3:ef:0f:2e:e0:63:64:1c:f7:54:6f:1d:0f:
                    b0:44:23:a3:9c:28:b8:c3:a8:eb:60:84:10:23:ca:
                    71:41:a9:aa:ec:c9:68:1c:b1:61:a6:9f:71:12:34:
                    bc:6f:b6:f6:91:45:c9:22:62:41:ff:00:c2:5d:fc:
                    e6:ba:52:42:d8:c5:4b:df:55:7e:99:1a:f3:b1:c3:
                    69:31:ab:73:1f:ce:c1:8b:0c:53:76:6a:35:ff:7f:
                    f7:7b:59:29:67:90:cf:34:0c:77:93:4d:13:d3:d2:
                    2f:1b:df:ed:4f:d0:51:7f:7d:ee:01:ae:b4:a4:cf:
                    a1:d2:27:59:84:85:d3:03:1d:58:a7:88:6f:fe:12:
                    76:d4:80:d7:59:2f:54:42:50:ae:11:01:c2:0d:6e:
                    f5:92:41:d4:fb:8e:80:5a:08:9d:73:d3:cc:d9:9e:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:7F:1E:22:CD:1B:2F:AC:93:6F:58:0F:EE:68:F1:79:8D:87:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d4dc95b-2907-3858-a12f-eb8b86917a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7b:97:14:7b:d6:5a:8b:a2:56:72:51:9f:12:53:aa:a8:95:
         c8:e1:45:a3:eb:82:3d:94:a9:be:0c:1a:78:03:a7:bc:38:4e:
         82:8f:87:2b:06:86:5b:0c:46:e4:fd:9f:ef:ab:e2:d8:7e:cf:
         34:6a:94:be:24:4b:3f:c4:46:ec:43:97:dc:39:b9:81:31:1f:
         4e:c9:e2:7a:a8:40:0a:8e:48:1d:30:36:9d:39:67:28:bc:60:
         42:02:09:0e:84:ef:6c:e4:84:44:eb:2a:84:70:2b:1b:d9:54:
         bf:64:53:7f:de:7b:59:7c:93:6d:2c:ff:b9:33:ef:d5:62:8c:
         d7:9d:1b:35:96:da:fe:60:63:3e:2a:12:ea:6e:50:f4:e7:0e:
         1a:cc:a7:5e:c7:c8:c5:84:73:fa:b4:72:3c:4a:05:f1:d2:da:
         c4:f7:eb:e7:5a:25:88:93:43:d6:5b:ed:ca:e1:a9:58:d3:30:
         37:87:ea:05:af:ad:a2:63:11:39:94:ab:ce:32:2d:3b:78:e7:
         b1:b6:f9:61:54:b0:fb:59:27:17:13:fb:67:85:4d:fb:be:25:
         bf:6b:61:38:fc:d1:cf:a9:6a:26:b1:41:d2:a7:95:1c:3c:f1:
         b8:96:41:6e:f4:3f:85:bc:5f:d0:b0:09:7f:72:15:92:2c:8e:
         d1:c4:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:22:59 2026 by rpki-client