Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b57d70da-c7f3-3852-b10a-84baa78bdaeb.roa
File:                     b57d70da-c7f3-3852-b10a-84baa78bdaeb.roa (raw, json)
Hash identifier:          VVM6B3TZJg6AekEIIv+SxHMfcZopJa1mIlTooY7/JtE=
Subject key identifier:   F7:0D:65:FC:B5:CB:57:01:29:01:CD:30:E3:FE:F8:27:A5:7A:D0:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0ED23EEA490D1A7BEC7FCD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b57d70da-c7f3-3852-b10a-84baa78bdaeb.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     396540
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:3e:ea:49:0d:1a:7b:ec:7f:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=9429de56-824f-4803-bfdb-8f541b85293a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:1f:32:10:ac:d4:8c:2a:d8:3e:cc:98:9f:
                    4c:8c:bb:e7:a7:ba:5a:e4:08:12:6d:09:e4:83:88:
                    32:e9:45:39:fc:36:26:98:2d:c4:37:fe:7a:e5:a3:
                    b6:5d:f7:e5:0b:38:25:f3:df:fa:c3:71:ff:a7:a3:
                    98:14:e8:27:30:3f:69:7c:dd:db:7a:f4:3a:e1:a0:
                    04:79:eb:ec:27:d4:56:2d:84:28:29:34:44:d8:97:
                    ae:cb:f7:fa:97:3e:6a:9d:73:d1:b7:25:5a:d4:7f:
                    2f:35:90:38:1b:5f:88:89:d6:0f:11:8d:b5:e7:5e:
                    02:2e:04:de:c8:26:9e:02:ad:53:a5:8d:5e:7c:c5:
                    37:69:17:85:ea:29:62:e2:6f:18:c1:32:d5:18:e1:
                    5a:7c:e6:c9:d3:40:d9:15:a8:61:70:2d:59:7e:95:
                    28:4e:06:2e:59:57:82:c1:aa:b3:6a:f5:df:0a:c7:
                    b4:59:da:40:ef:89:c7:c1:8a:6c:97:bf:96:b3:12:
                    5b:44:0e:c8:c2:1b:df:5b:9b:9d:f8:28:c0:6c:9f:
                    eb:bb:06:c5:0c:46:44:07:c1:67:45:b8:90:ab:98:
                    05:69:21:da:db:e1:0f:20:ff:a3:05:94:13:bd:7b:
                    07:c5:0b:76:b3:41:45:49:fb:4f:6d:fa:e1:ac:68:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:65:FC:B5:CB:57:01:29:01:CD:30:E3:FE:F8:27:A5:7A:D0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b57d70da-c7f3-3852-b10a-84baa78bdaeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:55:0c:23:46:f5:9e:e3:f3:36:1a:9d:e4:28:b9:44:67:7c:
         9e:d6:4e:66:6e:48:b5:50:9c:13:7d:2d:29:52:f2:bf:06:01:
         e4:72:10:78:03:a4:b5:6c:41:0a:34:77:f0:f2:9b:cd:42:1b:
         91:4a:3d:0e:34:b6:95:ca:b6:7a:28:d4:c9:0a:68:6e:ae:d2:
         7e:60:49:87:ef:bb:83:90:3c:98:1d:a3:9d:cb:33:06:14:0f:
         b1:1c:8c:3f:c6:5b:88:29:44:d2:dd:55:a4:f5:3c:5e:e0:4c:
         f6:f3:4f:19:6d:a3:99:b3:28:5c:d5:d3:c1:53:d2:50:58:61:
         17:62:93:07:1c:93:80:b3:fd:84:4e:d2:22:94:ac:a0:26:4e:
         1f:d3:73:a5:84:8b:9c:d7:78:16:c0:d9:cf:88:14:08:db:45:
         e6:b6:47:4e:84:9f:49:a1:c9:80:39:f1:a9:24:1b:4c:0e:7b:
         3f:eb:f6:e3:ae:dd:ea:dd:24:2b:5b:30:1f:fa:a0:44:98:19:
         38:87:62:a4:a2:fb:96:22:00:d6:83:c2:96:70:9c:62:07:e1:
         cf:95:f8:24:62:1a:59:ad:2c:a3:09:12:49:ac:71:0a:55:61:
         b7:72:f9:25:b8:72:8b:30:5d:b8:5a:6a:c8:6a:9d:96:42:4f:
         a4:9e:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:09:38 2026 by rpki-client