Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aa54038-7238-3541-90ae-3cd60f3b9ac6.roa
File:                     8aa54038-7238-3541-90ae-3cd60f3b9ac6.roa (raw, json)
Hash identifier:          zqigdhzaEj+/5f/hzs5Vg+icTZdhrN1AujN+eCvDdwc=
Subject key identifier:   11:CB:1F:0B:AE:38:85:9C:51:F7:09:C0:4F:C2:5D:7A:78:2A:0D:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA224798AF2DE36B8A3C540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aa54038-7238-3541-90ae-3cd60f3b9ac6.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     36625
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:24:79:8a:f2:de:36:b8:a3:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=829e30a6-89e2-4209-9ece-d1f7393283ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:bf:07:c8:91:ae:95:a4:b0:42:bf:d8:b2:
                    73:cf:ba:41:f4:8d:f8:38:42:54:b8:9a:3c:93:97:
                    07:39:94:39:1e:11:15:ef:57:19:86:7b:df:74:ff:
                    dc:44:8b:b0:7d:8b:0a:81:00:85:e8:3f:a2:6d:56:
                    cb:cb:d7:96:4e:b6:84:f2:d9:aa:c7:d0:c8:d5:25:
                    fb:6c:13:c9:f7:b1:48:e9:ef:c3:99:86:9e:d2:08:
                    27:77:b1:4c:30:b3:f2:c5:ee:6c:e1:e6:16:a4:ec:
                    8b:09:5b:c7:94:5d:8a:33:44:fa:87:d2:c8:34:48:
                    2e:4f:34:10:33:0f:d5:3e:4e:f4:0f:db:94:3e:c6:
                    e9:73:6d:e4:5b:c8:95:ca:90:75:2a:93:ee:1a:79:
                    17:27:e1:b1:fa:2c:1a:a8:cb:5c:b2:81:f2:c1:c1:
                    9b:ea:b4:88:fb:10:86:0c:e9:6a:89:27:d7:83:ae:
                    ff:76:60:a4:b8:27:93:4b:77:da:e8:bf:d3:da:b5:
                    bd:eb:4a:38:b5:7e:dc:90:e4:a6:3d:09:06:61:f2:
                    ea:40:c3:22:31:53:ca:cb:16:ca:ef:11:07:1d:4e:
                    8a:26:9f:93:b8:71:6b:61:04:56:85:00:0a:e9:e7:
                    a6:e9:46:3b:fb:ed:0f:cf:86:bb:a6:c4:3a:6c:1b:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CB:1F:0B:AE:38:85:9C:51:F7:09:C0:4F:C2:5D:7A:78:2A:0D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aa54038-7238-3541-90ae-3cd60f3b9ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:20:31:1c:41:85:99:3f:07:c1:c1:4e:08:d1:db:c2:af:
         6a:68:78:67:00:08:2f:3b:b1:61:1b:a2:59:99:0b:b4:9a:df:
         3c:b2:07:7a:06:65:59:b0:3d:3a:9d:ed:ad:d9:39:31:d7:07:
         f9:9a:d4:33:fb:1b:3e:6a:30:ad:1e:61:34:48:54:4f:e3:d0:
         cd:c4:b7:60:a8:4b:f8:55:75:db:a9:80:39:80:da:ac:cd:c7:
         d5:6e:7d:f0:de:a5:1e:e4:3b:70:ca:9a:2b:10:3d:85:83:7d:
         34:f5:65:4d:f2:7f:24:b0:d1:01:86:a4:84:25:b2:7a:b4:10:
         6f:75:35:50:32:2d:7b:bc:76:68:b7:fb:ea:47:91:a3:b0:e1:
         73:2a:3b:1e:b5:4c:65:e8:70:97:9c:0f:ed:37:c6:17:48:7c:
         03:79:57:d2:36:ac:b2:74:49:82:81:77:2e:20:15:16:52:5f:
         04:12:9a:ce:c0:36:b9:6b:30:02:c1:39:e3:1e:0c:47:ee:b1:
         f6:55:85:34:f0:aa:d6:1b:b3:77:83:7d:26:b0:93:80:45:09:
         e2:ef:5d:59:44:b0:2e:49:cf:6a:f5:57:77:b9:eb:4f:3f:a5:
         c6:65:52:d7:10:3a:c2:a8:fe:d3:4a:30:ae:3a:f8:3b:58:1d:
         0f:11:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:04:35 2026 by rpki-client