Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f96b971-e3b9-3667-8455-f6ff81543d1a.roa
File:                     9f96b971-e3b9-3667-8455-f6ff81543d1a.roa (raw, json)
Hash identifier:          gETiOsAE7BgpaFAYM4K/oDo1FZjdrVDExH4Gwn8tHyM=
Subject key identifier:   A4:91:1E:A0:29:3D:46:34:F6:B3:4D:03:8E:66:BE:E6:26:6A:7B:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F7DF8A6007E8DDFED6000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f96b971-e3b9-3667-8455-f6ff81543d1a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36623
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:7d:f8:a6:00:7e:8d:df:ed:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ff638202-64a6-44da-bb01-521b3d48dac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:3b:9a:15:3d:a5:ed:66:d3:77:bf:2b:80:
                    a6:d3:b6:76:39:71:88:a6:cf:67:63:19:f3:8f:73:
                    0b:d5:ec:aa:98:78:22:9a:89:e2:ff:2a:91:9a:58:
                    05:e3:1d:e7:b0:62:80:bd:ef:3d:4d:4f:56:7d:ae:
                    22:eb:0d:6f:df:7b:62:8f:0f:69:15:6e:55:54:3b:
                    10:b6:96:90:4b:74:be:de:d6:51:8c:d4:08:26:47:
                    36:3a:1e:78:48:95:d2:10:1d:ce:b9:b4:24:70:5d:
                    05:43:f2:3d:d3:71:30:e7:f2:fc:74:2a:4b:a0:00:
                    9b:a8:41:55:30:c9:15:a5:04:a1:fc:92:b2:a4:86:
                    dd:12:26:ff:28:16:b5:b1:fb:6b:ac:bf:53:2e:a0:
                    09:31:6d:58:a1:30:75:01:4c:a4:1e:52:c6:a5:40:
                    95:9d:34:5f:02:d0:6c:3b:a1:ab:14:1c:dd:57:69:
                    f3:46:34:76:3a:a1:9d:7f:d1:00:a8:36:58:f8:74:
                    d3:c3:c2:33:c3:be:a0:a5:cc:7c:21:79:d4:2f:cf:
                    1c:d2:40:90:6f:aa:76:41:20:96:25:fe:c4:23:2e:
                    2e:34:0d:e5:d3:e8:05:7e:43:67:7d:31:fe:81:c9:
                    2c:87:95:d8:d2:7e:7f:23:08:96:cf:99:9c:af:62:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:1E:A0:29:3D:46:34:F6:B3:4D:03:8E:66:BE:E6:26:6A:7B:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f96b971-e3b9-3667-8455-f6ff81543d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b6:1c:96:c0:03:9a:8c:da:37:82:3a:67:77:c9:76:bb:4e:
         03:c3:f7:78:f2:62:3e:22:97:25:eb:63:35:09:f9:c7:6e:a1:
         1c:ef:b5:37:18:74:ca:de:a6:22:9d:ba:6c:4c:19:0d:f9:4b:
         2c:2e:a1:22:6e:5c:6c:93:3d:36:cf:94:d4:b3:ed:bd:9b:b5:
         a4:05:b3:7d:0f:e6:17:80:40:18:07:6b:c3:61:66:b3:5a:c0:
         f4:bd:8c:f9:2f:1c:63:25:30:87:b6:cb:86:7d:e7:55:ad:41:
         5f:8c:1e:8f:fc:79:48:e5:62:7e:b4:ab:dd:ee:e8:c5:44:b5:
         53:b8:8d:8f:d2:84:91:82:b0:64:68:5e:8c:12:47:e7:13:f4:
         5c:84:11:83:bb:62:02:bd:e8:d4:9f:8c:97:25:95:a3:5e:85:
         03:96:a0:0d:9f:13:07:e3:40:02:7e:61:fd:1d:56:89:ba:3d:
         88:d2:60:04:e6:c4:01:03:f0:1e:86:26:da:44:e7:fa:b7:eb:
         61:6f:c1:ed:7a:ad:97:99:79:5c:7f:2a:4e:d2:45:c7:ac:0b:
         99:9d:82:fd:a7:15:4f:8a:ec:7c:e6:c8:45:00:02:8a:66:95:
         54:4b:fa:9b:43:77:bd:47:a9:34:ff:46:84:47:17:f3:24:c0:
         ba:93:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:56:39 2026 by rpki-client