Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6b5347-ef47-3fec-b68e-1991b8f85be0.roa
File:                     8a6b5347-ef47-3fec-b68e-1991b8f85be0.roa (raw, json)
Hash identifier:          SfZWrRH8GB88uCrQTF8TEEdSS+0dFCpdRkpH8GeqAlQ=
Subject key identifier:   92:8C:A8:59:56:DA:CA:91:99:74:97:CB:91:05:5A:8E:E5:93:A3:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4989812A3B2E2EB2BE7EE980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6b5347-ef47-3fec-b68e-1991b8f85be0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396613
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:81:2a:3b:2e:2e:b2:be:7e:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1a880e6d-0dcf-4804-a5cf-955a71bae680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:21:c1:f7:4d:c6:47:87:f2:ee:37:64:e5:c8:
                    49:dd:16:34:e0:34:4d:0a:ea:e2:30:67:21:74:b1:
                    f1:2e:25:88:19:6b:8b:b0:65:55:40:9a:84:32:c0:
                    a0:c1:2a:af:e7:e9:32:f8:a5:c5:9e:94:10:ce:5c:
                    6e:0b:b4:50:c5:c6:e7:fe:ca:10:08:72:b1:21:65:
                    f6:f5:81:f6:35:16:ab:ce:57:f8:16:de:2a:17:a2:
                    da:a5:7b:12:4f:36:40:6b:c4:a3:1a:b9:ab:cb:2d:
                    74:bd:58:0c:e5:e6:6a:b0:06:7c:2d:8d:d4:5e:d1:
                    c2:9d:89:bb:20:43:db:f9:79:e7:85:9d:cc:41:fb:
                    b3:2a:c7:fe:57:62:07:25:6b:3a:9b:fa:a0:06:c4:
                    2b:8a:7f:29:7f:74:4b:35:3f:1e:2a:7d:ef:f6:92:
                    c0:29:eb:f3:01:2e:dc:29:3b:40:cc:48:2d:43:a0:
                    38:e1:ce:fa:a9:ac:f6:f1:80:87:cb:41:63:c1:e2:
                    b1:c8:59:e1:27:01:f7:1f:1d:9c:88:a7:e7:8d:1f:
                    0e:ad:d9:9e:72:aa:1d:4e:47:32:17:e1:e6:02:99:
                    6e:80:a9:37:c2:d0:29:ea:df:77:c7:c1:44:10:b0:
                    c3:0e:89:71:af:ba:23:9a:12:4e:67:55:70:27:ea:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8C:A8:59:56:DA:CA:91:99:74:97:CB:91:05:5A:8E:E5:93:A3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6b5347-ef47-3fec-b68e-1991b8f85be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:51:71:67:30:b1:24:ad:0d:1a:8b:e3:07:92:b3:2c:5c:
         15:ac:b6:fb:9d:74:4a:d8:0d:70:70:a4:ba:10:22:cf:d6:cf:
         4f:18:17:72:fb:c4:23:cc:2a:ab:ef:93:d4:10:72:2b:23:c9:
         aa:d5:25:e4:9f:71:17:e4:11:20:e4:3c:c6:d5:71:e1:78:75:
         b1:2b:5d:b8:62:41:72:6d:f5:c6:74:f1:ad:ed:01:c0:45:0c:
         61:18:fe:a1:71:f9:1f:8d:14:32:db:2c:2f:65:21:d6:b8:7a:
         db:3a:ab:bf:e6:f7:57:52:af:3e:c9:c6:0a:7b:55:6a:4c:37:
         87:fa:5f:83:79:12:3c:63:50:a7:5d:75:83:8d:a3:c6:cf:40:
         7b:e4:8f:0d:7a:46:14:ed:f3:b7:31:42:a0:ef:c0:ed:69:14:
         07:46:59:5a:49:52:03:ef:4e:78:d2:66:72:97:1a:29:0f:cb:
         4c:3b:79:6d:88:77:6d:92:f5:63:ef:68:24:08:e7:e7:5e:02:
         0c:96:a8:15:55:2c:6a:cc:c7:c2:df:38:67:10:51:0a:d1:57:
         76:ef:60:11:68:c7:ec:42:d2:c5:42:07:69:56:78:d2:18:9a:
         41:5a:70:37:d5:f5:ed:98:99:a4:24:6d:8e:fa:1f:17:be:80:
         a8:d3:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:03:30 2026 by rpki-client