Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e5fe2e-2070-3c9c-8f86-e92ed80a3c56.roa
File:                     d4e5fe2e-2070-3c9c-8f86-e92ed80a3c56.roa (raw, json)
Hash identifier:          HE9fJOcQ+UA2VFCHcw0nE9DG+MjWZ5rS0Sh4UcQkJBY=
Subject key identifier:   BF:69:F6:19:B0:C3:30:DB:4C:AB:5D:1F:7E:C1:3A:F4:39:40:C3:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F9208A1841D4E71A94397D800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e5fe2e-2070-3c9c-8f86-e92ed80a3c56.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     397204
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:a1:84:1d:4e:71:a9:43:97:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=8652b812-43cd-408b-a3c3-98846292f8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:a2:ce:5a:1e:13:bb:6f:a3:2f:c8:24:1c:
                    3b:bc:0a:74:fe:42:43:f8:c4:65:c8:f9:fd:a6:f5:
                    14:e5:a8:84:cf:74:46:1b:92:c6:a1:f9:3f:2b:93:
                    a1:17:a9:65:dd:0e:fa:80:bc:79:d3:78:74:f1:74:
                    d6:32:5d:fe:5f:f6:53:06:54:64:67:8c:8e:06:b5:
                    b2:83:3a:3e:93:d1:d7:e7:41:1d:46:18:ca:02:49:
                    3a:da:ad:1b:fc:8d:30:32:79:46:7e:a2:77:29:8a:
                    43:33:c9:03:11:b9:4d:0d:ad:3f:dd:fe:a8:71:af:
                    ba:a2:76:99:57:74:60:e6:03:7c:a3:ec:1e:fb:51:
                    f5:0f:f9:3b:8d:22:04:b0:53:8b:6b:cc:7c:2a:32:
                    60:9b:29:06:5e:97:e3:87:d1:44:55:85:06:61:1e:
                    11:b0:61:3f:59:48:fa:ae:73:b3:05:65:54:2e:c3:
                    59:bd:4c:ae:8f:e4:62:78:f7:8b:7c:ce:14:06:18:
                    18:85:75:e7:41:20:34:fd:45:3e:78:6b:72:c7:ce:
                    13:34:d4:02:5f:8f:b1:9e:b7:ba:77:ce:bb:f5:44:
                    75:9b:19:65:64:92:ee:e9:25:e1:cc:85:74:67:7b:
                    7e:b0:2e:f8:42:e5:06:d6:33:38:ba:1c:13:fa:49:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:69:F6:19:B0:C3:30:DB:4C:AB:5D:1F:7E:C1:3A:F4:39:40:C3:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e5fe2e-2070-3c9c-8f86-e92ed80a3c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ea:bc:d4:41:91:53:40:f8:56:88:af:1c:fd:34:fd:dc:69:
         f5:4b:62:b1:a8:db:34:61:ee:e2:b4:10:6e:ea:f0:36:ea:6f:
         5c:06:4c:14:96:c0:e0:c8:31:41:2e:77:47:35:ab:72:c5:07:
         24:24:d4:00:bd:08:90:98:28:b1:b9:39:5d:fb:0b:e1:13:99:
         9f:37:21:4e:09:3e:4d:a9:c9:2e:5b:93:1c:9f:25:35:b5:3d:
         a9:78:81:1e:95:65:b3:c7:30:a8:60:fc:2a:54:ec:0b:b0:8a:
         20:ad:3c:b0:9f:31:d6:9f:f8:8d:3e:6c:19:05:f5:d5:08:2b:
         b4:d0:4f:16:ea:e1:6c:2d:88:ee:e4:f0:20:82:f3:74:62:e5:
         f4:55:79:69:bd:12:13:89:4f:a8:ce:71:6b:63:fb:80:70:d0:
         d0:7d:ae:32:d2:de:dc:4f:f1:68:6b:d7:f4:eb:a1:bd:38:c3:
         84:e5:f0:d0:ea:3e:b6:84:9d:2e:ce:d7:f2:cb:ab:01:30:92:
         72:c2:3f:4a:4f:4d:70:3a:84:f5:fc:11:fd:2b:de:5d:08:49:
         62:a3:68:89:ef:24:03:74:18:9c:72:89:d0:f7:d8:f0:79:96:
         4b:99:bd:50:2a:38:55:67:82:e0:94:5f:4a:8b:20:49:74:12:
         2c:b6:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:06:00 2026 by rpki-client