Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa
File:                     99747e2f-7cb5-37a0-8664-f750f2bde505.roa (raw, json)
Hash identifier:          X/nn2NBbDD4Qf+EFQjYWHBGegLnjcZZ3xz2sIB/pN/Q=
Subject key identifier:   F3:DB:7D:09:31:36:6E:55:0D:73:CC:60:03:4F:2A:13:D3:DB:03:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4988AE746B0380EE64B3BE69
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396589
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:ae:74:6b:03:80:ee:64:b3:be:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bedf657b-51c9-4241-8b72-e15ff6b47bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:09:6d:0b:75:94:fc:49:19:68:3f:b2:00:
                    7d:fa:0b:3f:24:03:a1:5f:bd:07:ff:e5:0b:b2:d1:
                    92:da:37:64:29:65:03:fc:3c:36:9b:ef:9b:8f:fe:
                    c3:84:68:8f:e8:e8:e8:06:d0:66:9d:6a:78:8a:1f:
                    c8:1f:fd:d1:b5:e7:3b:13:77:51:8d:a1:a7:b9:0b:
                    9f:a8:08:76:5e:9a:d4:e9:98:5c:d6:5c:bd:48:37:
                    52:3b:44:a8:ce:21:f4:b6:c7:8b:66:f0:8f:de:17:
                    49:80:fe:cf:1c:82:de:6f:2d:19:ff:ca:1c:35:b9:
                    70:29:fa:ab:89:b8:ae:70:9b:cd:1e:e6:62:53:6d:
                    ad:d9:76:20:13:c7:5a:9f:92:92:72:c0:45:1e:2d:
                    62:75:3c:28:76:c3:46:97:15:21:80:6d:fe:a0:3c:
                    80:cf:bd:52:66:dc:5e:fb:c1:a3:03:73:55:48:55:
                    e7:e1:9f:06:5b:a3:03:76:fd:ad:85:8a:fc:c8:29:
                    6b:fa:e4:df:9b:32:f3:8b:60:9e:9b:ec:9c:a3:35:
                    5a:d6:81:99:db:7a:0d:49:b0:e6:5f:9e:1e:9e:6d:
                    10:37:42:be:e3:81:53:1f:27:01:d6:ff:e9:7c:d7:
                    35:fa:97:f8:9b:1d:67:b3:d7:3e:5f:28:39:e1:bd:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DB:7D:09:31:36:6E:55:0D:73:CC:60:03:4F:2A:13:D3:DB:03:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:29:1d:9f:e4:50:9b:87:6f:03:35:5a:d3:16:4e:21:b0:40:
         cb:bc:fd:c2:22:e3:83:bd:38:8b:0e:77:ed:fa:ab:0f:c4:7c:
         74:19:28:a7:fe:d8:17:1a:90:03:f8:09:40:73:0b:0e:d9:f9:
         81:9e:0b:a2:0a:cf:d4:34:09:4a:cd:c3:f9:66:0a:ce:fb:7d:
         88:4f:aa:9d:54:ae:81:5e:0e:3c:ed:1b:79:39:3c:93:aa:49:
         77:3e:72:8b:ab:cd:f2:66:fe:5c:84:a7:fe:f0:13:6c:85:41:
         df:bd:4a:e1:bf:f7:e9:ec:72:d1:3c:df:a5:64:a3:d1:20:44:
         84:08:8b:bc:34:39:d1:c0:8f:80:49:c8:8b:36:9e:4c:ec:b0:
         f5:0c:08:2a:e5:14:09:1e:29:db:ec:cc:d3:5f:39:f8:09:54:
         5f:ea:21:ef:8f:0f:9e:41:a8:50:63:9d:eb:f0:65:45:27:84:
         5e:74:0b:60:81:8d:8e:cd:1e:60:8e:49:f8:1d:a2:7e:cf:90:
         52:6c:2b:fa:33:9e:37:3b:98:46:25:13:83:d0:23:16:dc:86:
         91:f9:0e:90:e4:2d:e5:b4:57:60:61:89:1e:43:78:27:45:34:
         41:70:00:d8:ae:9c:e6:d1:34:af:2d:b7:89:bc:b0:b2:de:db:
         e1:32:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:42:39 2026 by rpki-client