Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143d8d8-b67e-3768-841f-348f5196c7ff.roa
File:                     8143d8d8-b67e-3768-841f-348f5196c7ff.roa (raw, json)
Hash identifier:          pooOxbNs7eDQEXlZnj5F7wa9Mh5244N+OnxruEMtfYs=
Subject key identifier:   0F:61:28:88:00:CB:DD:25:C1:F7:01:42:4E:36:2A:89:67:AC:CE:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4987DB487DE788316F93C700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143d8d8-b67e-3768-841f-348f5196c7ff.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396567
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:db:48:7d:e7:88:31:6f:93:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b95c8eeb-9ffe-4388-8c16-a91e196d814b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:fb:ba:45:63:34:a7:da:a4:4e:47:94:c2:
                    f1:2e:40:47:00:0b:e4:fd:f8:42:b0:91:f8:f0:ad:
                    af:d7:3d:99:40:97:26:b5:ae:f2:09:d6:05:11:5f:
                    0c:e1:86:4b:fd:18:51:38:09:f8:35:68:cd:fe:2b:
                    04:b0:ce:46:ea:78:35:48:1f:36:b8:19:f5:10:d2:
                    68:1e:7c:4a:e6:f7:97:28:4b:fc:ef:7a:1e:7f:db:
                    1b:3a:20:6c:15:fc:ab:7e:c8:fb:c5:41:72:34:ec:
                    a1:bd:83:9e:4c:05:a8:8e:c3:64:38:49:52:5c:24:
                    39:6a:7f:d1:00:dd:c8:d9:cf:b3:cc:6e:3e:86:95:
                    2e:8a:39:47:32:46:88:87:64:ce:7b:b9:97:bd:66:
                    db:cf:aa:a3:85:43:e9:a3:3f:bc:97:92:23:65:9a:
                    23:90:e0:5b:0f:2c:bd:eb:80:fc:8f:34:fd:52:a0:
                    2d:f3:30:22:88:1d:8b:bf:6d:13:cb:ab:19:5d:5e:
                    41:67:0b:fc:83:75:c9:54:2b:61:ca:bf:4b:ea:ef:
                    dd:61:0d:40:c5:5b:92:ef:46:c1:86:dd:0d:c9:c0:
                    88:3c:0f:9e:b3:8c:c8:8c:44:c4:99:c6:e1:63:1f:
                    dd:19:3a:f4:81:69:63:96:c5:be:3b:d1:60:b1:54:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:28:88:00:CB:DD:25:C1:F7:01:42:4E:36:2A:89:67:AC:CE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143d8d8-b67e-3768-841f-348f5196c7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:81:c2:ab:1f:16:63:d2:25:13:bb:bb:a3:e5:34:b8:59:c8:
         c7:2f:b9:8a:70:e6:8c:3c:53:11:98:46:21:f1:b4:5e:08:61:
         24:5a:bf:c8:98:ae:c0:ca:01:07:f1:13:fa:16:a0:6e:14:5c:
         30:6e:f4:05:9b:69:8c:8d:c0:58:f8:b5:12:82:a4:b1:ae:b5:
         80:23:4b:e4:75:8d:6c:02:ec:3c:e0:13:04:bf:cc:0a:54:4d:
         a3:15:83:4e:90:c1:59:7d:35:a8:a6:2c:02:3e:70:47:0b:67:
         71:eb:90:21:b0:fd:27:18:5f:27:8e:83:e3:43:bc:b4:cb:3c:
         b2:c6:01:6e:5b:5e:ab:1f:80:bb:a0:b7:86:30:ac:af:df:86:
         3c:1d:7f:97:4f:23:1f:7c:97:b9:da:25:01:29:7b:84:e3:a4:
         97:85:cf:8c:5e:6d:5f:b4:76:b5:54:00:f6:18:0a:3b:2e:29:
         73:9d:c9:65:f7:07:49:42:80:b7:ff:cf:76:2d:26:8b:a9:60:
         7e:f1:ab:55:bc:88:e2:eb:b5:e1:5f:09:2d:e8:cd:b8:33:85:
         2e:61:61:1e:6a:7d:58:00:ec:cb:7a:f3:8f:9a:48:89:97:46:
         b6:cd:07:19:c3:88:a9:82:bd:b1:d0:4f:32:a5:ba:81:69:17:
         f3:85:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:48:49 2026 by rpki-client