Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a482667f-e18d-3528-a894-b29899c1ef44.roa
File:                     a482667f-e18d-3528-a894-b29899c1ef44.roa (raw, json)
Hash identifier:          QimIISpVrxlXB4NAoTWdS1aJZPYXZKmL7QA3/+jKM3I=
Subject key identifier:   CD:39:ED:E0:60:F4:53:80:4C:2E:02:63:7D:13:EC:B1:C0:9C:7D:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0ED23E34AC1C1CDF56F42960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a482667f-e18d-3528-a894-b29899c1ef44.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     397193
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:3e:34:ac:1c:1c:df:56:f4:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=cfc5da26-f5fc-4436-8146-f2095e35e407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:67:83:5f:23:3c:da:55:57:5d:5e:68:10:
                    80:fd:b4:1a:98:a9:c9:50:24:ce:d3:e9:6f:ae:24:
                    b9:df:a5:24:f7:b1:8c:d5:b3:c0:60:81:4e:fd:f3:
                    64:45:bb:0b:72:59:35:c2:38:65:c4:b7:a0:f1:aa:
                    90:67:0e:f4:bb:5d:a9:72:91:e9:a1:c0:a3:db:d1:
                    96:b8:6b:fc:d9:bd:42:1e:4c:f4:83:d1:3c:a9:aa:
                    b5:b8:92:dc:fa:8c:a0:cc:b9:98:a3:80:f5:97:01:
                    c7:92:18:08:39:de:02:e1:43:5b:04:c9:27:41:72:
                    00:78:39:a7:6c:c7:77:49:b8:4c:dd:9c:14:70:3b:
                    c1:77:af:f1:ab:25:07:63:a5:e2:1b:1d:50:69:dc:
                    52:00:47:ba:98:c1:99:a6:b9:0c:23:20:6f:61:ed:
                    72:8b:70:86:f4:a6:92:07:0d:b0:11:cb:8e:8c:f2:
                    f0:94:ec:8d:26:f3:65:75:92:dd:f9:62:3f:df:2b:
                    09:48:ba:5a:b6:5f:9c:a2:7a:d5:13:91:df:69:e7:
                    07:f6:de:3d:bc:12:f7:39:9c:21:c1:38:ad:71:20:
                    ed:40:68:17:34:59:9c:39:30:32:da:50:3e:2e:bd:
                    4c:54:eb:e9:34:e9:13:ce:38:bd:a4:c3:e2:94:79:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:39:ED:E0:60:F4:53:80:4C:2E:02:63:7D:13:EC:B1:C0:9C:7D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a482667f-e18d-3528-a894-b29899c1ef44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:11:05:9c:56:93:66:04:2e:5d:8f:e4:48:42:5b:28:c1:
         eb:95:e9:a5:cb:70:2d:87:91:05:45:e1:f1:f2:bb:10:9d:79:
         71:89:bf:a0:aa:6a:4e:b1:9e:1b:17:fa:01:f8:ce:46:71:45:
         85:d1:7f:11:23:25:89:cc:57:f9:db:bc:4c:4a:df:f7:98:c7:
         9c:d2:1e:ba:15:3b:09:fd:b0:3b:e5:ad:ac:53:f0:25:af:44:
         0c:8d:0e:12:6f:4e:9e:8c:67:26:36:70:a4:dc:ff:b6:13:fe:
         2f:a5:1a:11:61:00:78:e4:3d:62:e2:75:49:01:6b:43:14:d7:
         9c:79:3a:b4:dc:a0:86:ae:df:27:d8:58:96:93:23:96:d1:84:
         37:42:f2:1f:d4:b2:ed:94:2c:88:77:2f:19:5e:5e:d6:29:91:
         e3:75:d5:44:ae:de:b3:77:c4:f6:b2:2a:18:51:7b:1e:64:ad:
         ed:51:3b:8c:e4:0d:7e:4c:c3:bb:b7:91:a4:14:17:ce:a8:b2:
         da:32:f0:fb:1b:f2:b0:f0:e1:3b:00:57:80:be:e5:f6:47:61:
         c2:9c:28:06:94:9c:db:55:d1:70:4a:72:35:be:13:49:c4:f7:
         c1:83:3b:4c:11:e5:c3:11:6e:6c:8b:2c:17:c3:f6:9a:64:ba:
         47:e0:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:12:43 2026 by rpki-client