Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf755c95-5aeb-3773-8a5e-faefe14ece68.roa
File:                     bf755c95-5aeb-3773-8a5e-faefe14ece68.roa (raw, json)
Hash identifier:          HE3z6eOosqFsCW7emRmOUq6VVBcL7f3wJyuQOwkzNdc=
Subject key identifier:   01:CB:DB:70:7F:9A:30:24:99:4D:93:AA:E2:72:B7:95:9B:A0:65:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF1821FF5DE66C46C25D4C180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf755c95-5aeb-3773-8a5e-faefe14ece68.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     396597
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:1f:f5:de:66:c4:6c:25:d4:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=e3141e57-0d6e-4772-a2c1-a16fb5d4a92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c8:a6:fc:75:18:e0:94:fe:a3:d8:e6:ac:17:
                    54:48:bf:b1:b6:28:d9:ee:f8:8f:db:91:1d:ab:06:
                    a4:8c:95:3d:1c:eb:17:df:09:1f:53:da:da:24:9c:
                    49:b8:29:d1:90:a4:25:38:2c:35:3a:3c:58:59:97:
                    a3:59:6f:9f:8d:b3:d8:09:03:d4:c3:18:73:47:8b:
                    89:a0:64:be:c2:cd:bf:eb:0c:c4:f0:a9:c4:6f:e3:
                    67:ac:8f:9e:91:09:79:59:2a:23:1d:81:2d:af:8b:
                    81:c3:19:f3:7b:cb:57:2a:89:fd:f6:b0:bd:ae:65:
                    49:63:15:5b:65:20:49:1e:5b:c1:cf:e6:ee:a8:2c:
                    98:fb:64:9f:93:dd:6b:cf:93:72:df:b2:7e:56:2f:
                    af:bb:c4:f0:5e:60:f7:ed:0e:a7:fd:03:4d:67:fd:
                    78:46:17:a1:cc:7f:c4:90:f1:75:c2:ba:92:b2:31:
                    dc:f9:1b:06:94:9d:ca:b8:99:36:0d:8c:39:32:4e:
                    02:66:e3:3f:61:ef:02:7b:6c:c3:7b:74:fd:5b:d4:
                    da:f3:76:54:53:37:65:0d:8f:06:6d:ff:79:c1:b2:
                    c7:28:62:bc:8f:bc:a1:83:85:f1:97:d5:ad:b9:b1:
                    3b:7b:4a:95:64:2f:d0:a3:13:09:bb:13:6e:7b:02:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CB:DB:70:7F:9A:30:24:99:4D:93:AA:E2:72:B7:95:9B:A0:65:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf755c95-5aeb-3773-8a5e-faefe14ece68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8b:a7:1b:29:d5:9d:05:cd:4b:f0:88:da:3a:c3:14:22:ce:
         53:d1:93:a6:34:13:c2:1f:31:cc:0a:af:31:9f:1e:26:03:51:
         54:7e:d6:68:20:92:ca:97:c8:f0:0f:8b:02:ed:ee:23:f4:a1:
         a5:75:58:95:19:ee:6c:ab:df:2f:39:2c:cf:5e:d4:01:c6:6f:
         98:7f:53:72:5c:43:fe:80:8e:d5:0d:bb:50:75:ee:44:19:1c:
         c7:9c:1c:9b:bd:0f:d4:d0:2a:47:15:4a:60:73:39:c7:bf:0d:
         bd:8c:b3:23:e2:6c:22:cf:06:d2:32:ac:05:a8:f4:01:60:fd:
         7e:6e:eb:6f:2c:b5:f0:62:7c:93:ef:27:10:0e:e2:11:9b:2b:
         b4:52:48:63:aa:81:21:ec:ce:00:4c:70:9c:5a:89:44:07:43:
         c2:fd:ba:af:25:fe:a9:91:7b:15:da:5f:3d:d1:3d:73:6c:bb:
         2e:f7:22:7c:a8:3f:aa:ed:a3:2d:13:2d:8d:65:56:47:60:fa:
         3e:2b:af:c4:f5:d9:4a:1b:59:82:84:cc:fc:d5:36:de:8c:39:
         b5:31:f0:a4:76:90:1e:02:52:54:3b:b1:81:8e:0e:b4:aa:20:
         54:5a:33:51:94:14:78:7c:7d:68:5b:af:30:cb:62:ee:05:d1:
         e4:a7:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:09:10 2026 by rpki-client