Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4588cf0-0852-32d5-a25f-579a6d2c3143.roa
File:                     a4588cf0-0852-32d5-a25f-579a6d2c3143.roa (raw, json)
Hash identifier:          fAVb8MA0AYhNP71ur4iAqpDcXh2L+LeFk28ZMS2VECU=
Subject key identifier:   D7:EE:3B:75:4A:04:23:AD:40:9C:3B:B1:E3:E4:F6:75:9A:A0:AB:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0672934DED3691206E7E9C72
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4588cf0-0852-32d5-a25f-579a6d2c3143.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396600
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:93:4d:ed:36:91:20:6e:7e:9c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=0838cebc-e759-424f-8584-94b555d5ba8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:cb:0b:30:ef:08:26:b5:13:0e:ad:8f:ea:
                    aa:79:c7:f8:a5:ee:5c:cc:71:51:8d:ae:77:52:60:
                    5b:c6:e4:81:2e:e0:74:08:99:54:a8:1b:c3:f1:80:
                    c2:d5:67:a8:88:86:df:15:65:c9:05:5c:2f:d3:6f:
                    68:06:fb:ac:11:93:68:1c:c3:7b:17:f9:12:8f:21:
                    24:50:39:b4:73:7b:8d:96:91:08:e6:72:6b:8c:8f:
                    1f:17:e8:84:47:63:91:3e:ca:57:fc:27:95:b3:ec:
                    f0:6b:fa:46:86:50:1a:c2:5e:32:0e:cc:87:15:8b:
                    a7:b0:f4:27:49:d1:08:77:c9:18:eb:d3:1e:d0:9c:
                    31:d6:9a:88:de:2f:b3:cc:61:7d:a9:84:8a:03:b5:
                    0a:95:c6:b2:de:d7:38:23:41:29:c3:d8:57:e4:9e:
                    d6:0c:4c:22:1f:1c:5a:77:ea:80:35:60:33:38:49:
                    0c:c5:b8:d5:b5:88:dd:c3:25:34:2a:d6:3d:2d:b1:
                    46:84:ae:69:cd:43:b0:0d:06:75:ae:ea:e9:40:44:
                    1f:37:dc:46:e9:6d:9a:7d:72:ba:ec:e3:ac:99:5a:
                    73:42:72:a8:ac:f4:36:0a:5f:2f:d4:ec:d2:fd:57:
                    18:de:e0:91:04:f9:7e:bb:16:70:e3:36:e2:46:72:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EE:3B:75:4A:04:23:AD:40:9C:3B:B1:E3:E4:F6:75:9A:A0:AB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4588cf0-0852-32d5-a25f-579a6d2c3143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:30:26:74:46:4c:99:d5:1e:a3:af:fa:79:b3:a6:2d:50:b9:
         d9:46:7a:12:48:4b:88:ce:fb:37:d7:99:30:bd:68:e7:eb:10:
         ee:8b:a3:8e:d5:e7:38:69:51:99:66:46:a7:e1:4a:33:4d:f9:
         40:dd:e8:94:fc:1d:eb:74:62:da:c8:91:fd:3e:94:f2:dc:31:
         b4:7d:3c:37:e5:d6:3b:c4:03:5d:79:da:8a:cb:b3:6d:d6:35:
         d6:18:d6:7b:7d:07:22:23:e0:f8:69:fa:80:37:79:c4:dc:a0:
         01:9f:35:81:49:e7:e9:e7:64:ae:e4:d9:ae:81:f9:d8:ac:69:
         c3:1f:95:cb:ea:e5:67:4c:83:fe:5a:79:ec:e0:b6:cd:13:30:
         d3:a1:11:bb:0a:1a:a1:d1:a0:f5:3e:cd:4d:69:85:a9:b3:a9:
         5f:a5:42:43:92:8a:14:42:8d:e7:a3:08:26:1c:df:55:39:df:
         5d:b2:85:86:f7:39:06:4c:78:db:ff:c5:9c:2f:c7:b1:a4:42:
         ca:c3:0a:11:74:f8:18:a1:8f:20:04:0b:36:fb:99:2e:7d:5f:
         e9:cf:3b:de:b5:a5:cd:5b:9b:69:f1:e3:35:c4:17:26:98:1b:
         4c:7c:7d:56:13:30:6c:03:6f:98:c7:69:c4:c3:1d:b7:35:92:
         eb:3b:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:00:11 2026 by rpki-client