Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed9a195-0591-37f0-b01e-958259686159.roa
File:                     7ed9a195-0591-37f0-b01e-958259686159.roa (raw, json)
Hash identifier:          HOGVmYVw7fRx8RVqnsO4oOYs9Zvo33jdt1qV28lxUB0=
Subject key identifier:   D2:1A:34:4B:90:B1:BE:53:ED:81:1E:59:58:36:A6:0D:9B:F9:EC:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F576811C0DEEF9FF309E99738
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed9a195-0591-37f0-b01e-958259686159.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     396613
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:11:c0:de:ef:9f:f3:09:e9:97:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=c2caef9e-a245-44f1-84f7-b97118830968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:a9:95:fc:92:72:77:2b:3a:0c:b7:86:35:
                    56:d9:2b:d3:c6:07:06:cf:d1:5b:a4:ff:29:25:63:
                    d3:5f:33:b7:fc:85:b1:ea:b6:91:9c:d2:0f:65:cb:
                    bf:6d:a1:37:dc:5b:89:7a:f5:22:8a:bb:3c:62:c0:
                    3b:66:14:6e:36:f8:3b:3b:17:4a:a0:97:e4:92:7f:
                    42:a8:34:90:99:a1:ab:50:6a:0c:38:d3:95:51:ca:
                    e7:69:6c:6a:50:cb:a7:4f:88:b9:41:7a:06:ea:2d:
                    26:b0:84:2c:ba:95:5e:b2:2e:40:d0:5a:e8:e2:b7:
                    a2:df:2d:11:ec:59:11:87:fe:30:68:17:1f:b1:02:
                    7b:7b:17:a4:41:3f:f9:c8:dd:3e:46:bb:d1:d7:b4:
                    49:1a:25:26:1a:db:0a:34:06:aa:ff:91:41:fe:5b:
                    fc:fc:87:b5:c3:6e:ca:31:99:ae:1a:44:0d:87:c7:
                    b0:6c:66:f8:39:34:5a:a4:17:05:6a:4d:64:70:4e:
                    26:73:d2:49:71:0d:6a:21:50:42:e9:59:47:40:ef:
                    72:d1:00:a7:4c:02:b1:46:52:16:a7:b8:a3:c9:68:
                    d0:95:42:a1:1c:b0:80:9a:32:67:c8:ba:c5:02:bb:
                    26:8f:3e:dc:ba:40:ce:ed:45:c6:10:eb:b9:c7:61:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:34:4B:90:B1:BE:53:ED:81:1E:59:58:36:A6:0D:9B:F9:EC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed9a195-0591-37f0-b01e-958259686159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:23:53:0e:94:e1:d0:ff:12:3e:e9:da:de:8c:d7:cc:7a:26:
         78:ea:00:e0:47:26:50:65:0f:59:7e:37:d2:ad:33:fe:3d:86:
         b9:6f:17:f1:db:5e:8a:30:d3:62:e7:e6:36:6a:0c:89:06:63:
         bb:e1:60:63:3a:d0:95:39:81:8c:2f:c8:10:55:9a:22:dd:95:
         98:f4:b4:40:3a:02:3d:d0:b6:ff:d1:d6:42:d5:45:37:a3:bc:
         20:32:a0:78:82:a3:51:a7:82:f9:82:98:75:7e:5a:20:d0:33:
         86:81:88:79:a0:b4:4f:f1:09:07:1e:ea:69:a8:d8:8b:70:88:
         94:48:33:fa:ad:54:96:dd:81:58:4f:5e:fb:b6:d3:96:f9:01:
         c4:b9:6d:82:98:40:24:da:1a:9d:ab:a7:a9:a4:4c:d4:28:1f:
         80:99:41:fb:d7:1f:c1:43:7b:95:6d:9e:6d:8f:f4:8a:dd:0a:
         54:3a:31:04:75:58:98:6b:1f:1a:bc:80:12:88:03:48:06:8e:
         e4:e4:af:9c:f1:73:01:56:22:8a:23:e6:5d:06:d9:6d:71:f5:
         17:8c:03:3d:7b:09:2b:35:0e:71:1a:47:a4:a5:b2:3c:a2:3c:
         be:c8:70:2a:f4:a7:6a:4d:67:48:72:9d:7d:bf:0c:18:24:ce:
         d1:db:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:56:51 2026 by rpki-client