Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc14e3d-97d9-3c44-b538-d350de21da7e.roa
File:                     bfc14e3d-97d9-3c44-b538-d350de21da7e.roa (raw, json)
Hash identifier:          1CEurzB+ZZLygBwvP/02blUGQY1L+2eVT/oo16xKgYA=
Subject key identifier:   32:01:7E:1B:F1:BD:B1:8F:B6:47:57:A8:DB:C4:8D:D2:99:16:48:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49730289047B84AB4C996100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc14e3d-97d9-3c44-b538-d350de21da7e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397208
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:02:89:04:7b:84:ab:4c:99:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=07fcd47d-58eb-4e9d-9fb3-2c1dab639f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8b:f8:7b:53:b1:d5:25:bd:c2:09:ba:60:b9:
                    f6:d7:77:0e:8c:e4:d8:7d:8f:c9:7a:fc:a9:5c:c2:
                    e7:78:7f:69:40:3b:44:a9:be:5c:10:1a:f0:69:ab:
                    de:06:cd:fd:78:e6:1a:85:0a:d4:9e:24:f2:35:5a:
                    62:4e:7c:38:77:6c:e7:a8:02:3f:0e:2c:43:36:9c:
                    63:0a:65:e1:91:e1:39:71:f7:af:bb:0a:60:1a:7f:
                    2e:60:cc:02:58:8c:e5:54:2a:af:20:e5:3c:20:86:
                    90:60:10:1e:b0:fe:fc:10:01:1a:d1:3b:4e:dd:b9:
                    b2:92:ad:7e:ad:42:06:6a:2b:0b:75:b5:e7:1e:52:
                    ed:fe:4e:4d:aa:f3:8d:03:f0:a1:c8:52:65:9c:2b:
                    63:6f:16:48:09:2a:3c:3b:b7:20:90:9a:9b:e6:80:
                    7c:a2:00:bd:e9:c2:46:a7:c9:93:aa:0c:28:d8:c0:
                    7f:93:ee:6f:51:8a:43:86:13:ec:ec:d8:c0:19:61:
                    2c:e1:16:43:a8:b5:a4:97:03:5e:e7:49:9c:58:36:
                    86:4d:dd:25:8e:67:5d:ad:0f:57:8d:60:69:ed:05:
                    b2:d5:63:10:4c:c2:43:bc:dc:83:49:76:aa:aa:2d:
                    5f:28:80:70:dd:41:7f:ae:e8:b8:f7:e8:13:75:34:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:01:7E:1B:F1:BD:B1:8F:B6:47:57:A8:DB:C4:8D:D2:99:16:48:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc14e3d-97d9-3c44-b538-d350de21da7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:90:27:ad:6f:cc:2e:b2:a4:58:b8:6c:56:ac:34:d5:43:
         92:57:9c:36:79:cf:ba:ea:63:e9:aa:e3:f4:cf:5e:ed:da:af:
         16:28:d8:11:e1:71:49:b1:0e:71:3c:e7:1e:01:a1:1b:57:b1:
         51:59:8a:d9:79:13:e3:96:17:21:f7:16:64:1d:2b:11:f8:2e:
         20:e1:a8:e2:95:3f:fb:a4:fb:e6:84:95:fa:6f:85:05:25:b5:
         97:cf:af:8b:8a:c0:4a:4e:f6:5b:91:c6:3e:a1:b2:19:9b:72:
         2e:b7:9d:f3:d8:1a:3f:c9:01:6f:d5:6b:58:1e:19:11:37:96:
         d7:bc:b3:3f:fa:1a:08:0e:7c:7d:e4:ad:10:9d:1a:e8:6f:73:
         0d:db:c5:62:81:90:4e:b9:b2:9a:90:2d:5a:3d:f8:48:57:77:
         ee:cb:d1:97:38:7b:9c:ae:9b:bf:d7:f7:9a:2a:3b:98:41:89:
         43:ff:e8:86:2e:6a:c5:22:90:d2:d1:ce:fc:ad:8d:5c:ff:52:
         a5:56:42:5e:a0:46:0e:85:82:38:b0:5a:80:36:35:05:ec:47:
         f5:83:b2:8e:17:2d:b7:20:d9:2b:9e:1f:ef:38:a8:19:26:c6:
         f1:31:24:22:65:34:05:51:9e:51:8d:1c:be:37:29:3f:93:a4:
         43:df:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:42:29 2026 by rpki-client