Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9266bbde-7d0b-3195-96aa-f6a02d90b49c.roa
File:                     9266bbde-7d0b-3195-96aa-f6a02d90b49c.roa (raw, json)
Hash identifier:          5OVZQSn65KIMol9u3CqrhNE/+oeefRj8nr0P9NqG5xw=
Subject key identifier:   0C:02:CA:34:12:0D:DD:8E:2C:AD:B3:A6:76:FB:5A:81:48:17:59:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4989B4CE6E674F71E24D5B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9266bbde-7d0b-3195-96aa-f6a02d90b49c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396573
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:b4:ce:6e:67:4f:71:e2:4d:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2b9ba98a-6716-4b76-a68d-b658c3985c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:88:a1:f8:00:e6:11:1f:70:fc:4e:4f:99:
                    36:91:c1:72:fa:89:45:b5:49:6b:a9:30:3a:9d:74:
                    23:d9:a4:3d:58:42:d9:b1:33:d3:0f:45:d3:3e:02:
                    fd:79:9e:17:b3:3f:c3:8b:b9:19:7e:1a:6e:a4:06:
                    09:79:e4:ef:27:55:3d:5e:ab:5e:b4:bd:43:37:86:
                    a5:e1:5c:7a:8b:1e:2c:93:ed:cf:97:fe:aa:c9:ac:
                    c7:01:6c:ab:c0:08:62:3d:9c:07:30:4a:f3:e6:cf:
                    1e:29:6d:17:c5:a2:d4:48:77:22:ab:4d:94:79:d4:
                    d3:20:63:eb:76:c5:61:c4:2b:73:3d:5b:c8:5c:f4:
                    6b:94:86:31:16:44:f0:a7:98:72:79:d4:4c:4d:be:
                    b5:e5:5a:e5:f4:f3:cc:f2:19:96:13:95:27:2e:ca:
                    3f:ad:54:31:d4:3e:9a:53:d1:96:5d:57:9f:26:50:
                    db:a9:81:c6:1d:89:35:57:66:46:fa:c5:f1:a6:05:
                    dd:67:cc:27:db:fb:30:e1:4d:b5:e9:24:2e:bf:6f:
                    24:17:b4:8c:de:e3:fa:4b:b8:86:bc:e3:da:6f:a0:
                    c9:f8:ee:e8:9c:39:f5:64:d6:10:06:99:ec:9d:d9:
                    6c:49:0a:2d:73:62:2b:26:0f:f5:d9:7c:5a:44:1c:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:02:CA:34:12:0D:DD:8E:2C:AD:B3:A6:76:FB:5A:81:48:17:59:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9266bbde-7d0b-3195-96aa-f6a02d90b49c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:e0:5f:d0:f7:ce:de:07:f6:b7:36:e1:14:f1:e0:0b:3e:
         cc:be:70:41:fb:48:57:a4:83:c5:2b:6a:8e:f1:56:e2:62:94:
         33:3e:2e:fa:53:18:86:02:90:80:b0:da:4b:e6:f9:91:a6:7e:
         19:e0:9a:61:48:48:8c:3b:fe:66:4a:14:d8:0f:47:bc:c1:68:
         1d:8a:c7:ae:7c:f9:b7:f3:59:44:ac:82:2b:fb:cd:c3:f9:56:
         47:fa:ce:87:08:82:70:50:05:0a:0e:2c:fb:ec:08:44:d4:b6:
         a0:d5:93:3b:65:5d:c1:14:a6:5b:7d:6b:5b:c8:4f:04:d4:23:
         b7:d4:1f:4e:3b:40:d6:e3:34:88:4a:ce:37:c5:87:65:80:36:
         92:67:bb:c9:37:33:79:4b:1c:f6:80:a6:70:d3:b7:59:eb:51:
         0e:bf:d8:82:18:03:3a:2e:ed:88:d6:26:df:9f:c1:c9:b8:84:
         ea:53:cb:cc:5b:13:15:0b:f7:ff:c4:b0:96:10:80:4c:fe:62:
         f6:ce:51:d1:85:32:b6:16:8a:fd:7b:40:18:3c:27:5b:0c:56:
         5a:a9:f4:9d:20:ee:4a:2e:92:0d:20:e2:ea:3d:e0:48:95:aa:
         85:71:ea:ef:27:d8:46:9d:00:1f:98:84:ac:5c:a2:9d:b9:76:
         8b:bf:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:43 2026 by rpki-client