Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6135d9c8-42c1-3dde-b219-3994db06c74c.roa
File:                     6135d9c8-42c1-3dde-b219-3994db06c74c.roa (raw, json)
Hash identifier:          nLcYfGphgM3uW6aIlnOXtAnM/O+FQW0rmCVrakgbeHc=
Subject key identifier:   8D:89:A1:F7:5E:DA:29:80:7B:8F:AE:6B:CA:F9:83:40:15:8E:80:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986B4EC18981FEB8F7F15E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6135d9c8-42c1-3dde-b219-3994db06c74c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36630
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:b4:ec:18:98:1f:eb:8f:7f:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c8f13df1-09c2-4a82-b91a-0a768ef7d547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:22:71:28:1d:d4:0a:b4:fe:73:b9:fc:6e:
                    d0:32:b8:39:67:5a:f9:86:c6:6f:40:32:7a:99:e8:
                    49:d5:e8:62:5b:a5:8d:a8:60:54:8b:d8:7d:6f:f9:
                    1f:37:f4:a0:76:67:fb:69:fc:15:25:bd:27:d1:61:
                    09:65:d2:01:97:f4:8a:ba:3b:cf:3b:1b:59:0a:1e:
                    86:af:df:0e:0b:77:f4:74:e9:3c:a7:01:49:62:2b:
                    d6:27:be:80:a2:98:14:7d:f6:1b:ff:23:3d:61:32:
                    b0:b3:30:d7:00:ee:f7:bc:29:6c:4d:ad:c6:99:1d:
                    25:3a:4f:1b:8f:c7:4c:fa:3a:d3:d2:07:c0:d0:f4:
                    4f:18:f5:fe:cb:10:85:b8:96:9c:4b:a3:31:f7:33:
                    74:6e:db:b2:43:2f:39:aa:cc:ed:4c:cb:ad:8b:a8:
                    11:59:f6:1e:39:f7:92:97:88:58:d6:f4:b8:f1:98:
                    0e:76:d5:b4:d5:bc:6d:b4:02:cf:c7:5c:8d:4d:7d:
                    7e:15:ac:60:83:40:89:6c:e1:2c:11:ac:1e:f3:5e:
                    c3:fb:60:81:48:16:2c:62:4d:60:55:0d:a5:e9:61:
                    29:80:79:05:80:b3:e3:0d:10:57:9b:46:d8:b1:4a:
                    05:ba:ad:b6:48:ee:42:b1:2a:67:c6:37:ae:cc:62:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:89:A1:F7:5E:DA:29:80:7B:8F:AE:6B:CA:F9:83:40:15:8E:80:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6135d9c8-42c1-3dde-b219-3994db06c74c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:da:d8:e5:91:c6:2f:19:4f:e4:95:54:52:f1:d9:62:bc:a8:
         2a:4c:08:5a:f5:07:f2:15:f6:2e:c0:de:86:4c:1c:12:d6:37:
         54:d4:0a:d0:ff:bd:52:95:b4:0b:6f:1c:39:10:0a:72:dd:8a:
         53:3e:37:39:82:14:1d:5f:fe:58:6a:20:b5:87:64:77:81:c1:
         54:f5:ae:ad:58:6e:87:95:6c:61:c0:0f:38:18:19:cf:51:e1:
         3e:a7:b4:b7:35:e7:91:fb:bf:93:06:63:2a:0a:8b:ed:d5:00:
         64:e4:04:19:1f:5c:d0:a2:69:e8:8d:fa:b3:65:15:4c:00:8a:
         da:e7:1c:1f:2a:63:21:52:ce:a4:81:e1:c7:0b:03:0d:55:a0:
         54:7c:76:2f:09:7d:38:d7:66:5f:2c:6d:d1:cf:ee:f7:eb:78:
         64:3a:16:f8:7f:ca:0b:29:54:1c:1f:cd:60:78:83:78:8b:d2:
         87:0b:e1:71:f9:79:8b:23:3f:c5:f4:c3:1f:1c:1f:fe:7c:01:
         27:35:b2:1d:0f:52:28:54:bf:fc:01:5a:df:d0:85:32:7c:fe:
         fe:ab:c2:33:87:27:5a:7c:e7:7a:c0:85:c3:c8:e2:d7:58:93:
         a5:aa:71:e8:62:27:d0:51:ed:40:41:7f:fe:98:02:93:0f:aa:
         e3:38:73:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:34:49 2026 by rpki-client