Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d92b45ec-79a7-3b80-a5c4-e20e02016e4e.roa
File:                     d92b45ec-79a7-3b80-a5c4-e20e02016e4e.roa (raw, json)
Hash identifier:          zaz/vQLaLS6YE85Tb+78U+ngkLdU395OF2E5PcaMbKM=
Subject key identifier:   99:84:47:0D:01:EA:38:B6:51:5C:E0:0D:C9:36:BF:76:44:B4:D4:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584FA85E286F7D30DF873DA15140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d92b45ec-79a7-3b80-a5c4-e20e02016e4e.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     396573
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:28:6f:7d:30:df:87:3d:a1:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=ece191d3-9b27-4ecc-bea1-1d3b73e057f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:0c:7a:ee:ff:48:22:bf:ea:d6:65:67:0d:
                    af:8f:4e:e4:bf:5c:6e:82:ff:ae:ef:9f:76:90:c9:
                    aa:76:58:6c:92:19:e6:95:b3:5a:37:4b:4a:55:3e:
                    cc:bd:ee:c3:9a:73:1a:ff:91:e9:80:be:6c:fd:d4:
                    d0:7b:d3:fb:26:81:b3:87:bc:e1:7d:4e:6c:04:6d:
                    06:c6:67:33:d6:2c:0c:fa:e3:38:ee:34:8c:c0:64:
                    10:08:67:04:19:f2:f4:08:0f:fa:f5:bc:d2:db:40:
                    c4:b4:bc:1f:db:04:5e:ac:37:f2:c9:cf:4f:7e:75:
                    af:ce:a1:83:a3:39:b2:3c:e0:ce:9d:d4:57:68:ca:
                    ab:33:ef:8a:fa:43:2c:a0:f2:e1:67:dd:8b:59:1d:
                    25:13:2f:39:50:3b:85:d7:5d:15:15:e7:0f:e2:b4:
                    93:cb:77:f4:72:3e:3c:fe:f3:6e:ed:be:e3:56:04:
                    77:a2:47:f4:19:5b:2a:2d:75:d4:bf:c0:97:53:e5:
                    ba:96:24:aa:30:9c:4a:aa:95:15:bc:7a:27:fd:62:
                    0a:1e:df:25:39:35:d0:52:58:d2:56:28:28:89:f3:
                    0a:17:8b:80:36:f2:c0:27:9a:84:fa:f6:d5:3c:5b:
                    6a:53:83:63:06:59:0a:d6:1f:6e:a9:05:34:3c:bb:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:84:47:0D:01:EA:38:B6:51:5C:E0:0D:C9:36:BF:76:44:B4:D4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d92b45ec-79a7-3b80-a5c4-e20e02016e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:34:c9:d2:2f:d4:ab:a7:dd:d5:65:55:87:17:d7:85:f9:31:
         9c:84:1a:b2:67:38:3f:52:b2:38:68:33:8e:24:bf:3e:09:eb:
         1c:0f:19:c9:ea:c7:88:cb:ae:a9:4a:0f:f0:35:20:ee:62:c7:
         1e:43:f5:f2:b9:0a:ac:ba:e3:82:b1:c4:6d:9e:04:22:60:91:
         d0:4e:82:98:2f:13:ff:97:e4:ee:a9:e6:d4:66:9f:8d:34:dd:
         04:c6:69:98:61:1a:22:c8:b6:a8:ce:32:29:a7:8e:4e:fd:7c:
         51:52:1e:4f:e5:50:09:d8:74:dd:f9:4a:47:1a:24:2f:c3:e4:
         8d:b7:7f:14:ab:4d:62:41:e0:8a:2a:84:3e:e4:9a:1c:e0:9f:
         bc:df:b4:d7:a9:96:ef:09:f5:18:f9:8b:b8:1a:b5:94:19:ec:
         df:a6:cd:04:ec:8a:21:bd:b6:ff:73:3e:67:49:ee:13:6b:23:
         f1:ab:a9:45:27:29:02:1d:6f:99:31:21:e7:50:23:05:65:9c:
         19:86:ff:3f:b0:27:a9:e3:36:7c:f2:46:3b:bc:b7:1f:b6:3a:
         90:a7:11:9d:6d:72:fe:ae:1d:f8:a4:20:68:db:e5:3b:c5:12:
         ff:7d:b6:ee:8c:86:91:1c:9f:f5:3d:69:b3:05:91:74:28:8b:
         2f:f9:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:13:05 2026 by rpki-client