Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa
File:                     b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa (raw, json)
Hash identifier:          vgraShIP6aIZtTfaj7fD7PmGRT2/IvH0MyawlUL5KnU=
Subject key identifier:   21:7D:24:BF:E2:CB:88:C6:17:C0:34:A1:E3:3C:4D:3A:98:24:77:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EFCACE620A4126CBD3E91C580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     396550
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:e6:20:a4:12:6c:bd:3e:91:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=af16943a-a70d-40b3-b1cd-4b35344e2d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:07:e2:57:2b:74:63:e8:c4:f4:cb:85:1e:
                    75:84:34:68:ae:9e:ca:04:d7:a2:39:04:5a:24:4d:
                    2b:0d:7d:89:35:95:78:26:c7:9d:f2:98:6e:55:9e:
                    ff:bd:79:98:94:df:ed:c4:b0:96:b4:e8:cf:77:18:
                    d5:1c:1d:ad:a4:f9:38:10:ce:23:5e:22:76:c7:2a:
                    24:31:5c:7c:f5:b7:3e:2b:59:54:13:8e:8e:19:77:
                    be:12:fa:fd:1f:a5:80:35:3c:61:c6:4b:2e:f9:bd:
                    20:c5:4b:b7:00:a4:9c:31:3a:10:8a:40:9c:f0:3b:
                    1c:12:46:5a:fc:4c:51:ef:70:01:c5:56:ad:53:d0:
                    79:a9:56:c0:c1:e2:da:7d:3a:38:ec:ac:31:d8:72:
                    5a:13:c1:fb:7b:9e:41:55:e3:8c:c3:1f:e9:46:cd:
                    07:37:fc:60:67:c4:e8:9d:93:48:69:c8:ca:04:b9:
                    e9:24:1e:af:d7:89:54:55:85:09:97:9c:c7:f9:2d:
                    fe:f1:b7:67:44:16:8f:3a:e3:6b:2a:33:29:a0:46:
                    ad:4f:c4:4a:6d:73:f6:a1:69:8a:82:96:a6:79:8f:
                    fa:f9:a5:34:ba:fa:f3:61:dd:3e:19:ed:63:24:c9:
                    fb:79:5a:f1:81:72:60:79:a3:aa:73:26:dd:78:2b:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7D:24:BF:E2:CB:88:C6:17:C0:34:A1:E3:3C:4D:3A:98:24:77:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:54:bf:9b:3e:fa:61:02:ea:3d:f6:b4:75:c4:a2:3a:28:
         90:8b:ea:35:2b:42:73:8b:f0:b8:a7:cf:d2:5f:d9:4e:c0:26:
         eb:b8:70:a9:99:3c:1f:cf:6a:19:dd:66:cc:37:39:59:3d:96:
         11:cd:59:89:48:54:ab:96:5f:be:4c:5c:12:09:4b:85:df:8d:
         97:1e:c8:9b:81:6c:67:9b:7e:04:fa:e1:5b:43:87:45:b5:52:
         ae:c4:2e:e8:22:8c:82:9e:b0:87:2e:74:03:fa:29:ae:d9:81:
         01:c6:85:2e:f9:a5:7e:16:25:b3:5d:78:c5:7e:23:dd:a5:a1:
         eb:b0:53:c7:10:a5:ad:83:ad:58:66:7c:8b:19:ad:99:a4:bc:
         57:b1:37:a3:a9:ef:77:c7:a6:99:7a:2a:1f:25:d7:65:14:8f:
         0d:bf:42:7e:03:a6:13:5c:43:bd:be:ab:45:59:1f:85:ac:ae:
         f8:a4:d2:71:76:61:cb:b6:ba:4e:67:bd:22:3d:64:cf:8b:15:
         1d:42:c1:7b:54:c4:6c:5d:bc:93:04:e9:1b:23:8b:df:1e:6a:
         01:2d:05:19:b6:f4:65:3c:13:dd:95:2f:08:af:97:82:93:da:
         d6:12:d4:13:0b:17:f3:d1:04:f1:5d:57:5b:a0:f7:bd:74:ba:
         51:56:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:16:06 2026 by rpki-client