Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b07d6ea3-c8b7-3bef-b480-2e2480e96302.roa
File:                     b07d6ea3-c8b7-3bef-b480-2e2480e96302.roa (raw, json)
Hash identifier:          CjE70HCCu+uM6UABTDxS2QUss/ELQOSGLlT2JKzRkfc=
Subject key identifier:   A7:BF:8C:9E:69:79:E8:07:97:4D:80:30:A7:29:F2:F4:74:63:11:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986FD51FF1A460FC9EDE6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b07d6ea3-c8b7-3bef-b480-2e2480e96302.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36618
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:fd:51:ff:1a:46:0f:c9:ed:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=650384d9-4034-4d6d-86c4-f42a60aba601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:0a:d1:d2:a6:72:fc:1e:c0:82:32:b6:aa:
                    23:f9:6f:bb:da:e4:b5:46:e5:82:98:f1:a1:24:66:
                    d6:66:27:93:c0:00:d5:70:af:ce:8b:bd:83:7a:6c:
                    be:b8:89:31:ed:48:9a:03:7e:f2:b6:e0:8f:42:f8:
                    ee:27:d9:ad:61:47:ff:cf:58:c2:e2:a7:9b:46:02:
                    7c:1a:1b:cb:d9:bb:be:4b:81:52:ad:39:6c:09:b2:
                    77:ee:a6:5d:44:f2:23:56:46:1e:67:7b:85:f0:15:
                    72:ea:2e:d0:50:2f:12:cb:75:db:e2:a7:00:79:b9:
                    89:1e:22:2a:3b:d6:c8:df:51:2b:24:46:96:a0:a6:
                    36:e6:49:39:14:6f:3d:48:c1:89:a8:07:4b:cc:ce:
                    f7:69:18:7c:e5:07:0a:aa:39:e9:0c:da:62:37:08:
                    f4:64:24:80:71:57:08:25:55:c6:b0:25:44:b2:4e:
                    4c:f0:5e:a3:37:4b:18:40:92:c5:46:79:16:13:78:
                    5e:88:87:fe:ac:cb:d2:8e:ab:78:2f:13:d1:84:03:
                    3d:50:2e:29:76:d8:47:e0:78:cc:83:a5:be:ee:12:
                    7a:ee:d7:04:1f:ab:4b:e3:c2:fc:36:6f:1a:bd:2d:
                    c0:90:ca:61:ad:f4:a7:84:e0:be:b2:4a:f0:55:e4:
                    b7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BF:8C:9E:69:79:E8:07:97:4D:80:30:A7:29:F2:F4:74:63:11:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b07d6ea3-c8b7-3bef-b480-2e2480e96302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:a7:ed:30:26:b2:03:36:61:2a:a1:f5:65:24:ea:c7:ca:
         7e:f8:3e:21:0a:24:33:7b:87:d9:03:6c:b3:c4:d7:e1:98:42:
         29:8e:ac:53:9f:db:ba:21:3f:d0:31:de:26:ba:5e:45:ce:14:
         ac:c5:99:b2:44:ac:0a:d9:1c:a8:75:f7:73:b3:b8:a5:4d:37:
         80:eb:aa:1b:ba:59:9c:6c:41:0a:c7:5c:bd:4d:41:04:e7:20:
         50:49:36:b5:1e:53:92:7f:50:61:3b:1a:6e:40:7e:5a:0c:47:
         60:8e:80:ba:7e:af:b6:4e:c9:9c:91:55:b1:56:92:b4:8e:4c:
         61:64:6e:c7:39:e3:9e:2c:53:b4:18:5a:86:15:0e:13:41:a8:
         2d:8c:2f:e6:9a:4d:a2:5f:74:7c:39:d8:83:a4:81:c9:57:b0:
         2c:6b:a8:fb:55:0c:f2:c0:df:77:9c:0d:d9:30:26:d6:3c:5f:
         02:5f:3e:80:aa:d1:fc:da:81:fb:7b:d3:14:45:8a:18:87:66:
         18:b4:81:92:96:db:90:8b:df:8c:c3:43:63:40:bf:4f:1c:e9:
         ea:c5:31:58:30:78:cf:65:8c:c8:23:97:54:5f:6a:6a:07:30:
         92:99:e9:5b:ca:fe:1a:cc:79:47:f0:fb:15:7b:59:1f:dc:83:
         be:a1:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:43:54 2026 by rpki-client