Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d543293-2032-3ad8-bba6-c7dea916af20.roa
File:                     8d543293-2032-3ad8-bba6-c7dea916af20.roa (raw, json)
Hash identifier:          QW7uY3SIzP/kHKhQQFLK7G1turEUcW27pbI48FJZCoc=
Subject key identifier:   12:DE:B4:06:7E:AC:35:D9:95:89:1A:31:1E:17:B3:38:4C:5C:42:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F7B808BF82DFA1417D400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d543293-2032-3ad8-bba6-c7dea916af20.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     25485
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:7b:80:8b:f8:2d:fa:14:17:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d2e1bd4c-fb3c-402d-83ef-c3b6b0362e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:ad:97:8c:5f:73:10:09:b3:7b:a6:05:18:
                    73:46:d9:11:2b:20:8b:ab:ac:08:a4:a6:ac:ee:21:
                    e7:4e:c1:46:3a:d5:60:13:38:26:2b:c5:1d:49:92:
                    96:e9:8f:a2:5a:72:f0:e1:4c:70:82:7c:20:fe:69:
                    43:90:01:af:61:ee:12:59:0d:a3:da:7f:c7:2e:33:
                    16:3f:6e:9e:e6:dd:f1:a9:b9:5f:59:08:52:81:77:
                    79:11:77:ab:91:fd:b3:51:c9:9a:f2:e6:2b:22:4f:
                    e4:77:09:1f:cd:63:85:25:c0:dd:81:cb:57:ff:1f:
                    09:7b:54:0f:2d:e0:cc:bf:b6:f9:89:cb:28:ec:72:
                    01:61:bd:8b:e5:9f:45:d8:6f:7a:49:81:a6:bb:5f:
                    66:d7:07:18:21:8d:11:fe:00:d8:64:bc:5c:9d:cf:
                    a3:6d:fe:d9:2f:aa:97:fc:a6:8c:46:d5:8a:32:b0:
                    0d:b8:f2:6c:77:c1:00:fd:7e:a5:d1:4f:37:0d:7b:
                    77:ec:13:d7:9a:02:da:96:4b:56:e5:fc:ee:a7:1e:
                    bf:4f:01:76:fa:69:53:d9:26:f9:63:0a:64:7c:f1:
                    8b:09:09:58:ef:87:d4:ea:31:69:13:50:3a:de:29:
                    39:25:a5:d6:1e:4a:3d:4e:40:79:44:a1:2f:59:5f:
                    16:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DE:B4:06:7E:AC:35:D9:95:89:1A:31:1E:17:B3:38:4C:5C:42:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d543293-2032-3ad8-bba6-c7dea916af20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:f7:fc:b0:6a:f6:62:3f:fc:e8:2e:95:0d:09:50:02:58:
         b0:77:c0:08:07:ae:9a:12:2b:65:82:cf:cc:87:82:03:cb:00:
         8c:ec:03:26:a4:c4:fa:c3:04:fb:9f:56:13:ee:a9:68:52:f5:
         10:78:59:6a:c7:32:6f:be:52:91:7a:cf:24:92:42:32:95:cd:
         98:36:21:f0:62:fd:d1:61:ff:f9:9f:b8:07:78:35:ca:85:9d:
         1f:e0:11:3c:d0:f1:f7:2a:35:c1:b6:7d:3c:88:ca:f0:bc:4e:
         09:4b:6c:a3:0b:18:94:b0:02:46:1b:f9:cd:2b:6e:98:f8:1d:
         79:99:60:18:c4:07:fd:11:69:19:88:07:cd:fa:3b:a4:9b:48:
         ac:85:87:f4:b6:5d:c9:cc:8d:71:68:15:64:06:5e:17:a9:4d:
         d5:03:d0:32:66:05:5b:0b:d2:b8:22:10:85:de:6e:a3:3c:d2:
         c5:e8:2a:97:bc:a8:25:0c:dd:66:b8:04:1f:54:5b:2d:99:a6:
         7c:8e:06:1f:29:6b:d9:0a:43:84:ce:16:9e:27:29:1f:20:0c:
         48:7a:98:ba:d5:a5:4a:80:5e:d6:9b:53:db:eb:0b:8f:39:af:
         6f:3a:81:f7:9e:1d:c2:b5:e3:74:30:87:b9:ec:d4:a1:30:ca:
         f1:4b:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:30:38 2026 by rpki-client