Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1e78691-07a7-31b9-8a22-4f4c59756e48.roa
File:                     b1e78691-07a7-31b9-8a22-4f4c59756e48.roa (raw, json)
Hash identifier:          ryJBEFIHAv0K4DrBgpPxEl9p+EBYRCkBOSAoodWLgnI=
Subject key identifier:   F4:F3:A1:1E:62:0A:90:B6:1C:C3:6B:63:72:5F:5A:06:CE:A7:56:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067290CDB7EC72F73031A060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1e78691-07a7-31b9-8a22-4f4c59756e48.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397210
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:90:cd:b7:ec:72:f7:30:31:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=feac8fba-070e-40e3-afd9-6e9359c2f7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:27:d8:1c:fa:76:04:f8:5a:e1:6e:f3:12:
                    93:f8:03:d7:b9:52:81:a8:94:78:a8:f6:48:2e:dd:
                    62:10:47:18:a2:86:11:01:68:1b:0e:29:fd:88:aa:
                    16:4f:ec:23:36:0e:6a:26:15:31:a9:55:37:38:61:
                    91:3e:10:f2:03:10:35:57:34:0d:b8:56:e9:f7:8c:
                    df:dd:34:c6:59:5e:9d:73:64:fa:70:85:08:af:31:
                    88:80:53:35:54:ac:8c:69:c1:fe:f6:ea:52:34:3c:
                    19:ce:5c:d7:51:69:ae:a8:c1:48:e9:07:8f:04:b9:
                    9d:8b:fc:2f:16:da:71:96:80:0a:a6:a6:31:58:24:
                    18:f8:f5:d4:64:4e:18:d6:ee:21:82:34:e0:40:f4:
                    1b:4f:46:31:f5:d4:37:f7:a9:f7:00:5d:26:06:e0:
                    64:e2:62:1f:b8:5f:1b:67:a6:60:75:39:db:60:fe:
                    2e:3d:f5:7f:d4:43:17:32:40:70:c0:4b:e1:48:5e:
                    83:c9:9d:32:80:11:f1:18:63:9b:02:0a:62:01:46:
                    e5:f6:db:fb:92:fa:10:fb:7a:0b:40:2d:4d:80:77:
                    2e:ef:8d:0e:3c:a0:3d:f2:b9:81:4d:11:c0:ae:dc:
                    af:c4:a3:12:49:04:8e:3d:7a:3b:f3:79:63:94:74:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F3:A1:1E:62:0A:90:B6:1C:C3:6B:63:72:5F:5A:06:CE:A7:56:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1e78691-07a7-31b9-8a22-4f4c59756e48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:11:55:ca:ab:20:db:77:38:b8:80:55:fa:7b:ed:b4:44:
         2c:21:17:f5:d9:b2:2b:21:e4:af:9f:04:8d:57:b5:8f:7b:d6:
         39:23:1f:7e:02:fd:fc:b1:a4:fc:87:65:15:73:2d:48:68:46:
         06:a7:bb:f1:7f:a6:5e:ed:a0:b3:0e:af:49:ef:e8:e4:54:c5:
         65:b0:d9:a0:ec:56:d4:46:01:2f:c3:b3:39:6e:28:6d:13:b3:
         56:ba:eb:32:7e:be:a3:47:02:1b:ad:a5:58:4b:ae:ee:3e:96:
         47:10:7b:58:bf:01:23:0f:68:4b:74:06:ac:e0:1c:11:13:6e:
         c1:01:1b:77:cf:7a:a4:a7:94:9e:3a:0f:66:2a:21:58:b7:27:
         a6:95:b0:fd:30:21:de:f5:79:ea:ee:a6:c8:b4:63:d8:0a:dd:
         bf:9e:66:a7:9d:b6:8a:cc:a3:36:a5:64:85:d8:9b:4a:1d:ca:
         ea:82:28:08:f4:de:ba:47:43:25:b5:f7:8c:e1:16:ad:5d:05:
         9e:46:86:71:fd:1f:cb:8e:b2:fb:21:80:ef:97:37:82:70:8f:
         a2:f9:e6:f8:29:e3:9e:2b:16:1c:b8:32:22:84:ae:df:7b:4a:
         a4:73:69:85:e7:7e:57:cf:2f:f7:2e:d6:be:9e:01:a1:2a:06:
         fe:1f:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:55:21 2026 by rpki-client