Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d488e07-7942-378e-948f-2810439c9ff3.roa
File:                     8d488e07-7942-378e-948f-2810439c9ff3.roa (raw, json)
Hash identifier:          fwPGQTC/3HlAagQTMwJj3SiK48cLvXKGFY65YTMqbes=
Subject key identifier:   8E:9E:05:76:CC:99:23:A1:56:25:DA:C2:BA:A4:06:C4:BA:9B:FD:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CF1730D1A5079AEEBE580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d488e07-7942-378e-948f-2810439c9ff3.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396611
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f1:73:0d:1a:50:79:ae:eb:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=56a4e5f8-46d7-461e-85e7-290c26d829db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:74:f4:64:1c:08:38:d4:9f:7f:25:1d:09:fa:
                    71:62:15:fc:bd:19:87:db:a3:d0:b1:df:7b:3c:6e:
                    91:cf:9f:4e:40:f8:68:b7:ee:3d:46:c6:60:1b:92:
                    80:d5:a9:de:91:a9:81:65:4f:f2:ea:a7:86:ed:53:
                    3f:3c:db:f0:18:4a:00:12:1e:51:76:ac:6e:0a:c6:
                    53:e8:e7:e4:e7:95:4c:82:aa:b5:eb:0b:78:31:9f:
                    3d:0b:98:80:64:4d:c3:13:f2:1b:ba:77:fc:d4:b9:
                    ec:c0:4a:76:15:0a:61:8d:67:af:50:33:a8:67:9b:
                    25:fc:fb:3b:8e:0b:9c:55:4c:94:5a:94:6a:7b:9b:
                    d1:2a:bd:a3:a5:ee:da:33:a5:96:27:13:b0:5b:a9:
                    3d:3f:3d:43:93:c6:3d:e2:a5:a1:86:05:d2:7f:df:
                    7a:48:af:6f:60:ef:42:ef:16:be:ac:9e:6f:79:08:
                    a7:20:02:68:cb:8f:9f:e9:67:e3:63:10:e4:f2:f5:
                    80:d8:f0:cf:cd:a6:83:b2:d0:91:9d:1a:f2:53:f3:
                    49:c7:8f:02:7a:d7:36:3f:97:a5:e7:24:ce:2c:f6:
                    6f:c4:b6:83:4a:9d:09:7f:dc:d3:3a:d5:ee:62:fd:
                    c1:fe:fe:40:1c:0e:f7:82:36:d9:81:b0:23:2d:6c:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:05:76:CC:99:23:A1:56:25:DA:C2:BA:A4:06:C4:BA:9B:FD:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d488e07-7942-378e-948f-2810439c9ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:e8:69:4c:d9:4e:b4:3e:99:14:42:e0:25:d4:97:ff:c3:
         b4:43:c8:5a:02:a2:d0:e1:82:2e:b6:b2:e3:72:1e:e6:24:c3:
         c1:63:ba:02:d2:9f:a2:f4:11:be:90:59:dd:ec:c4:72:a2:7a:
         ec:3a:f4:49:de:63:d8:11:a5:a8:f4:14:a6:57:fd:87:08:59:
         40:b9:f0:b5:91:42:aa:fb:cd:f3:18:75:d9:fd:4f:c9:e4:f3:
         2a:a8:07:7c:62:03:c9:19:6c:c7:82:47:fc:75:09:7d:5d:e7:
         cf:c7:43:52:6e:94:44:c4:4d:63:b6:9a:e1:a4:29:24:c9:a4:
         88:13:c5:b9:72:36:e9:44:1a:1a:f4:2d:c8:b3:a8:bd:11:b2:
         b3:88:d6:e7:3a:95:47:e1:01:c4:ed:70:5a:5c:2c:d1:e6:72:
         c9:68:2a:8a:ec:91:b9:7b:10:f3:a4:c8:10:15:9b:6a:ea:6d:
         93:66:65:b6:d6:68:38:e4:f7:33:bf:63:c3:55:cc:3f:21:f9:
         67:b9:11:1f:76:5a:d6:b5:a7:14:ea:0a:8b:d3:e8:20:54:2f:
         3c:4a:61:a1:fb:06:db:c2:04:b5:1e:a0:c0:ea:20:41:1a:be:
         af:f1:33:f8:40:97:34:0d:03:fa:bc:d1:b9:12:1f:fc:fb:62:
         d0:2a:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:02:48 2026 by rpki-client