Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98f12c11-5af0-3979-a79f-6782970beb19.roa
File:                     98f12c11-5af0-3979-a79f-6782970beb19.roa (raw, json)
Hash identifier:          TV6XDPNG+PrA09LWZyqeiYHJjgzgpNGXyYqtwFBLt50=
Subject key identifier:   82:EC:E8:22:6D:59:54:46:1D:BC:35:F9:40:6A:39:5C:DF:46:3B:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C27E830E90B18DAA814300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98f12c11-5af0-3979-a79f-6782970beb19.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     396594
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:7e:83:0e:90:b1:8d:aa:81:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=4d184ce5-38ef-4e3e-8be0-06974b3103dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:f8:91:29:23:98:d3:f2:1d:db:26:92:9c:
                    e6:a8:f6:fb:18:43:f6:78:4e:1b:b2:7d:92:f3:95:
                    66:1f:ad:e6:e9:2e:a4:34:6a:58:0b:16:7d:69:64:
                    52:b7:1d:51:d5:58:76:62:30:e3:75:f2:14:85:45:
                    56:f5:12:92:71:69:73:e4:48:2b:86:38:83:ad:8b:
                    18:97:ce:14:f6:cb:9c:cc:18:71:e8:7a:a5:64:ce:
                    83:60:6f:9a:51:f8:c5:62:7d:32:e9:43:b8:5b:1d:
                    ac:1b:e7:7b:b5:47:6f:65:ca:8c:4d:9d:46:06:3c:
                    89:06:92:61:3f:37:7b:d5:02:10:93:62:e7:9a:60:
                    ef:77:41:3d:a1:83:15:a8:a5:48:e1:8a:85:dc:80:
                    28:33:5b:8a:55:98:75:b6:ea:5b:2d:06:5c:53:81:
                    cc:74:b0:12:5a:dc:a6:b1:9b:80:ac:59:40:9e:a2:
                    3d:02:c3:4e:75:d6:30:81:a3:f0:e6:bd:ce:62:9c:
                    09:32:b0:81:21:00:d6:c5:27:ba:3c:66:b4:f9:a3:
                    a9:55:42:3b:54:1e:99:6a:13:7b:57:fd:fa:6e:a4:
                    d9:a9:8b:7b:73:84:be:51:5b:74:0c:37:14:3e:4c:
                    b6:5c:02:8f:8b:3f:fe:a9:b1:21:cf:1d:15:29:af:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EC:E8:22:6D:59:54:46:1D:BC:35:F9:40:6A:39:5C:DF:46:3B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98f12c11-5af0-3979-a79f-6782970beb19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:cf:2c:f0:e4:2a:7c:34:1f:53:19:0e:f7:6f:c8:7f:61:
         12:a3:a6:13:ad:68:9c:bd:82:36:f5:3f:10:90:88:6d:25:2a:
         05:8e:ac:c4:cf:f0:85:50:f1:79:1f:62:9f:47:56:1c:dc:48:
         e4:11:53:84:45:c8:d8:dc:2e:af:4a:a0:61:34:5c:32:19:c1:
         4a:2b:16:5e:ed:e6:0b:7a:8e:bf:10:89:14:8c:ca:30:fe:00:
         30:85:5c:b5:f4:e7:3f:46:d8:57:4e:de:3d:1c:77:df:77:fe:
         12:a3:6e:1f:a7:97:5c:a5:a5:1d:c2:f0:78:af:98:21:6c:1f:
         87:ba:11:16:97:c2:b9:00:89:0f:ca:ef:c2:82:d3:9b:e9:ad:
         90:25:d3:91:89:0b:76:60:47:2f:3b:3e:8e:32:f0:5b:5c:ed:
         a8:91:d2:b3:44:90:c8:bf:41:33:4c:f6:e8:82:d7:3b:c5:54:
         ba:c2:6b:60:c5:7b:ac:cd:52:fa:bd:62:e8:88:24:9b:2c:90:
         06:1a:e8:82:90:da:df:29:d1:63:b4:cc:d7:0c:91:82:79:73:
         0a:81:79:3c:f8:7a:fc:f2:d6:76:6f:87:33:96:d0:b5:cc:bc:
         49:90:f8:0f:5d:83:e3:84:72:84:37:dd:46:ce:b3:9f:6f:1d:
         1e:ba:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:43:59 2026 by rpki-client