Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b20b378-8e7c-3761-ac07-0190d72e73ea.roa
File:                     7b20b378-8e7c-3761-ac07-0190d72e73ea.roa (raw, json)
Hash identifier:          lLnsUUDGjDRXAw02yKrVOKpQvCxmU2IrUUUxe7cW5z0=
Subject key identifier:   24:DA:E1:F4:1A:E8:CB:B2:A5:FC:53:D4:D6:A8:5C:EB:33:D5:81:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EFCACE5DCE5259ADFA479FC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b20b378-8e7c-3761-ac07-0190d72e73ea.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     396588
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:e5:dc:e5:25:9a:df:a4:79:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=a577592c-7e28-414a-8511-ecff94c6aba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:b1:a7:22:bf:e4:81:e5:8d:fb:41:cb:da:
                    41:33:96:dc:1f:e7:cb:8a:20:80:48:27:eb:87:69:
                    c8:71:13:d4:81:5c:8e:18:03:3a:4d:7a:45:0d:b4:
                    ef:64:a7:a3:d5:63:21:44:cd:17:9d:6d:91:12:86:
                    23:0c:07:b1:a2:e5:bb:57:3e:3b:1f:53:78:fb:22:
                    ab:5e:6e:42:88:01:b9:82:ce:03:4e:f8:65:77:0a:
                    03:3a:30:42:1b:f2:46:9e:da:49:80:80:09:bc:73:
                    51:eb:b5:e8:be:c8:39:41:98:01:7a:ef:73:ac:8c:
                    35:1d:36:c3:4a:bf:15:25:ae:6c:7c:58:86:e1:f8:
                    26:b6:da:3c:63:2e:a9:aa:dd:95:ce:aa:47:30:62:
                    b4:a6:a6:98:e7:9f:e6:fc:ec:11:2b:d8:63:38:de:
                    e2:50:12:ef:12:ae:b2:33:33:71:18:7e:b1:25:68:
                    41:ec:e1:df:d9:33:d6:a1:cd:10:45:90:80:f7:b2:
                    de:d5:18:64:d2:ae:51:0c:71:fb:71:68:e0:35:38:
                    13:e6:e6:55:c5:08:ea:5c:61:1a:fd:f0:2f:45:b9:
                    79:7f:89:ae:90:7a:4e:61:da:4c:70:4a:5c:b9:a8:
                    df:18:91:b0:84:88:de:b7:0c:20:7e:2d:70:bb:b7:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DA:E1:F4:1A:E8:CB:B2:A5:FC:53:D4:D6:A8:5C:EB:33:D5:81:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b20b378-8e7c-3761-ac07-0190d72e73ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6d:58:21:f5:e1:c8:ec:ca:99:24:57:5c:80:85:4d:72:f9:
         d7:43:70:a2:d9:f0:75:a3:d5:65:59:43:7a:61:28:82:3b:d7:
         24:ae:de:23:a0:57:7b:57:5c:3a:3d:5b:65:a2:0e:f0:cd:cd:
         c3:90:38:7f:74:44:19:fd:00:3f:75:3c:27:7d:cb:e1:35:2c:
         87:2c:44:98:f0:68:a3:0e:0d:cb:12:a1:1a:fa:8f:b5:70:f3:
         0e:7a:f1:02:dc:b6:40:84:27:88:54:94:4a:14:d0:4d:75:af:
         86:2e:41:c8:7c:09:9f:5b:44:56:36:a2:ad:45:4c:a6:6a:02:
         9a:68:21:42:7f:f0:ab:ae:cc:de:97:61:e3:5c:46:18:9f:1d:
         66:be:ee:f1:62:8f:79:2b:9c:eb:90:88:90:6c:3e:fb:50:ef:
         3f:33:9a:97:0c:9b:05:f3:d1:5f:e4:7f:eb:29:bf:68:98:2d:
         4b:dc:48:f3:da:d7:8a:cc:fe:6e:95:e4:65:e5:d4:52:e7:fa:
         b2:bc:d8:a4:b6:78:29:b0:6f:60:8d:6b:82:4c:85:76:40:cd:
         cb:cb:de:34:bd:ea:28:d8:d2:70:6a:71:8f:68:05:40:95:10:
         57:df:fd:3b:8e:17:76:85:e1:22:d8:70:7a:cc:e0:dd:22:33:
         2c:76:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:57:45 2026 by rpki-client