Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6cae31-07d4-3b05-86ad-34332305d8d0.roa
File:                     bf6cae31-07d4-3b05-86ad-34332305d8d0.roa (raw, json)
Hash identifier:          7A8ec8XTGAD2+/qz8NZrx5UtIDqxFBD4BVMvPuMSJQE=
Subject key identifier:   79:C8:BF:95:D7:05:36:E1:29:FA:78:68:33:BC:09:78:29:3D:A2:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974ECE3953802A5CD5C0980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6cae31-07d4-3b05-86ad-34332305d8d0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36618
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ec:e3:95:38:02:a5:cd:5c:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=58ae5f99-5ade-4fef-b790-1cc607168a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:d0:38:85:31:e7:af:2f:e1:e5:32:23:b5:
                    02:3d:04:ea:59:d9:16:24:71:1b:2a:48:d9:4e:65:
                    ca:76:82:34:26:81:cd:b1:39:cf:a4:a4:7c:08:c7:
                    1f:3a:50:db:61:2a:8c:7c:5d:b1:9f:43:a4:43:be:
                    16:da:f6:5e:9f:b0:94:5f:8c:86:14:a9:fd:a5:7e:
                    18:21:16:1d:28:31:f0:df:b9:ad:69:72:a6:a6:0a:
                    cf:48:2d:91:7b:b2:d0:db:a9:48:cf:92:8f:3c:fd:
                    3c:e7:e5:cf:0b:40:e3:c7:a4:89:d6:11:6c:91:9f:
                    f5:2c:8b:8d:a8:7b:49:e1:e9:39:bd:90:d1:18:f4:
                    fd:34:b1:a2:8f:6c:45:21:83:a8:d8:a4:7d:9e:df:
                    dd:d9:78:90:24:42:03:09:60:a9:23:2b:44:33:07:
                    44:94:8b:a8:09:0c:f3:d7:37:67:5b:d5:e0:a8:16:
                    24:68:90:b8:73:54:18:14:d8:25:fc:78:62:42:d7:
                    eb:ed:98:db:ec:6f:26:86:e6:14:77:ea:6e:0d:cc:
                    9e:46:62:f3:69:24:40:41:2d:27:b6:b6:e4:5e:0d:
                    0c:0c:1c:94:07:3e:a2:21:44:25:b3:7b:49:0a:52:
                    d0:04:1a:83:25:fe:44:dc:ea:0a:88:57:15:4d:52:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C8:BF:95:D7:05:36:E1:29:FA:78:68:33:BC:09:78:29:3D:A2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6cae31-07d4-3b05-86ad-34332305d8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:cf:c9:9d:12:20:aa:f6:53:9a:be:70:56:5b:6f:7c:03:46:
         2b:84:84:32:ba:e0:d7:17:49:a4:d9:5f:0e:8c:0b:13:0c:0c:
         a4:09:c4:41:62:66:51:a5:da:be:f3:2d:9f:ce:dd:52:6f:97:
         cd:91:4e:91:54:df:71:8b:f6:6a:ba:b1:d4:4d:47:62:0a:62:
         eb:e7:1f:24:b4:43:d5:05:84:5a:9e:32:b1:8f:2e:27:56:61:
         45:60:84:2f:c8:ea:29:30:28:e6:52:c9:b2:08:f6:fb:ee:0f:
         89:a2:2e:9b:e5:f2:ff:04:ea:a2:25:92:53:4c:ce:8b:3c:c0:
         e1:e2:fe:1d:3b:3c:cd:8d:9c:89:f4:8c:92:47:88:d7:93:55:
         7f:18:4f:f8:3b:43:b6:6c:54:5d:2c:66:68:28:b4:03:05:11:
         af:f0:50:7e:c6:db:65:a5:07:79:0c:19:61:6e:6f:db:41:3c:
         35:55:da:62:31:14:e2:b9:a2:5e:8b:89:aa:11:d6:87:b3:b3:
         d6:d0:e7:8a:33:d6:08:17:70:a4:df:5b:51:78:e5:9d:25:90:
         c9:4c:be:90:17:2a:63:86:25:7d:e1:38:36:aa:aa:36:23:1b:
         f7:dd:a1:84:8c:34:1f:15:3e:87:08:3e:b9:d4:bd:70:51:d5:
         95:e7:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:43:59 2026 by rpki-client