Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f358a3b-7da3-39a6-a904-031bc4fe546e.roa
File:                     7f358a3b-7da3-39a6-a904-031bc4fe546e.roa (raw, json)
Hash identifier:          SnWVs6PlihF6g8QmAGTnaDmMOeE2c3Ri5bCLymGpQ8A=
Subject key identifier:   02:88:EE:50:AC:55:F4:E9:9D:19:75:29:C2:A5:75:AC:F2:CE:D0:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972D789A5EF1CEE93DD2000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f358a3b-7da3-39a6-a904-031bc4fe546e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396585
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d7:89:a5:ef:1c:ee:93:dd:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1aeeca24-92d9-4b4f-95ba-5cb3feeb465a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:22:8a:ee:ef:73:96:e0:24:57:3c:77:3f:76:
                    39:b9:5d:be:56:09:77:93:e2:10:29:b7:bb:8a:5a:
                    ed:98:a4:3e:35:dc:bf:52:bf:9b:c0:71:e7:1a:17:
                    23:d7:df:ed:15:33:f1:9c:9e:6b:c7:ac:8c:08:12:
                    1a:36:63:81:68:ee:d0:44:51:de:b1:b7:3c:b9:f7:
                    db:5d:50:90:de:ea:80:6e:99:67:26:09:3c:af:bd:
                    28:ff:49:62:fe:74:39:09:ab:00:0a:d3:8f:b8:9c:
                    7c:cc:e7:83:71:59:9b:4d:df:8a:b5:ee:84:a0:bf:
                    3c:39:b1:c9:7f:c2:b5:76:ed:f6:86:98:35:67:12:
                    fe:d1:b5:50:79:b5:8f:a5:44:b6:8d:27:eb:2c:d0:
                    4c:2b:94:b8:53:47:a5:c0:e2:35:07:94:50:68:76:
                    ba:42:b6:6e:c9:8c:74:78:ab:81:f6:1b:8d:b0:cd:
                    1e:d2:b4:98:04:58:06:bb:a1:ff:d6:05:31:00:b6:
                    fb:9f:39:ae:33:18:fb:4b:fb:ce:5f:d2:e3:5b:73:
                    10:52:70:2b:cf:95:f5:e9:15:1d:d6:59:00:cd:48:
                    c4:d6:78:f7:56:97:36:a5:f4:de:3f:24:e7:02:9f:
                    49:e8:55:8e:59:de:a1:6f:de:99:b0:8c:d9:43:0a:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:EE:50:AC:55:F4:E9:9D:19:75:29:C2:A5:75:AC:F2:CE:D0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f358a3b-7da3-39a6-a904-031bc4fe546e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:26:46:ac:b2:84:da:31:9e:75:6f:24:41:e3:84:58:c6:
         d9:84:eb:f3:84:ac:3e:6b:41:75:5f:79:37:f6:d0:80:2c:9f:
         1a:52:75:2b:f9:2c:26:01:54:95:91:b5:4a:be:3f:72:be:94:
         a5:4a:06:d6:34:b9:d7:78:df:e2:fe:86:1e:bb:2d:89:55:df:
         8f:0b:54:e3:91:37:1f:44:61:7e:5a:27:a0:6e:8a:9a:ce:c9:
         fd:4a:fe:47:97:be:d4:a6:e4:41:73:1c:57:4f:d1:e0:d5:59:
         1d:3d:b9:22:e6:bf:e7:4b:d5:07:11:a2:ef:e0:78:15:86:1c:
         df:06:22:5d:ef:46:88:a1:58:99:be:4c:a4:0c:4d:fd:b7:9f:
         b1:9e:f2:f9:88:b6:b2:d3:b4:17:07:6f:92:6e:c8:23:cd:4e:
         03:f1:6b:56:47:c9:de:4b:92:fe:8d:0a:01:c6:58:9c:0f:92:
         8d:23:66:13:af:d8:f6:8f:1c:47:c8:c0:23:92:60:52:d5:13:
         42:b5:60:72:ab:dd:6a:8b:7d:5e:54:f6:c0:b3:ac:11:d6:fd:
         fb:f8:a2:89:e4:c3:05:14:9f:b7:ff:93:a3:7d:71:5c:f9:0a:
         9b:6b:e0:be:99:ab:2e:7a:60:d5:45:c3:18:b4:ff:03:34:d4:
         44:91:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:36:45 2026 by rpki-client