Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbdca077-f925-3c83-b7cb-256983dcfca0.roa
File:                     dbdca077-f925-3c83-b7cb-256983dcfca0.roa (raw, json)
Hash identifier:          Htd3vxsAJ/KoWWJrRigmSgiSF52KHLFb8puFr989ul8=
Subject key identifier:   28:F9:C9:F2:4F:16:C0:F8:2F:D9:25:F9:BA:D4:A1:E8:BD:C9:BE:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49874EF6311D742186D7FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbdca077-f925-3c83-b7cb-256983dcfca0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396571
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:4e:f6:31:1d:74:21:86:d7:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=667e0f8d-a314-42c0-bb84-7666efbd4635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:14:21:7c:f3:33:0e:c1:a6:25:65:e4:2a:
                    c0:a1:06:ed:46:20:6d:f4:33:95:49:4f:87:45:2b:
                    b1:a1:f2:a1:d1:b1:48:52:e7:33:a1:f2:ae:05:cd:
                    c8:d1:7d:69:3d:3a:da:c8:11:aa:20:d3:68:ea:c8:
                    f4:0f:b6:da:ec:11:c3:c5:c2:69:fc:58:eb:29:fb:
                    13:17:07:21:f8:23:dd:8b:c6:3a:d7:66:1f:23:73:
                    0d:c3:18:22:34:fb:9b:78:d1:d1:d8:f5:42:84:34:
                    64:c2:9b:b8:39:be:c6:de:5f:77:4f:de:44:1e:9f:
                    95:65:06:83:d2:a7:dc:12:cb:e3:9e:37:40:34:3b:
                    85:3a:56:7c:26:60:b7:e7:27:dc:69:94:93:53:4e:
                    f8:56:1f:15:f9:bc:b2:e7:c8:af:52:a7:c5:5e:0e:
                    75:f2:a7:23:01:1c:f5:51:cc:e3:90:ae:64:3d:d8:
                    35:6d:be:9d:2e:d3:a0:fc:94:d9:ab:cf:b9:ce:c2:
                    d9:9b:b8:b7:47:ab:64:29:58:f5:05:16:46:64:20:
                    7d:25:55:7f:f3:1d:0f:02:aa:f9:c2:8e:81:60:55:
                    eb:38:af:53:10:4a:5b:81:53:82:d0:10:4e:e1:a5:
                    8c:10:3a:1e:51:9e:3a:79:91:f9:bb:6b:49:99:09:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F9:C9:F2:4F:16:C0:F8:2F:D9:25:F9:BA:D4:A1:E8:BD:C9:BE:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbdca077-f925-3c83-b7cb-256983dcfca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:21:36:f1:43:b3:5a:69:05:34:7c:e0:7d:fa:55:ad:ac:
         e9:06:cb:92:cf:ad:31:87:ee:61:8c:2b:d3:4d:83:3c:48:68:
         be:26:92:81:ee:c4:7f:9e:7d:55:2a:2e:98:cf:d8:d3:89:f6:
         d3:89:e6:a9:21:65:35:a8:63:42:cf:9f:9f:20:01:e5:e8:b4:
         cd:09:77:77:be:0d:5e:c4:f0:a2:8c:23:8c:1a:3b:fa:2d:e0:
         ca:37:85:29:68:f2:e4:90:1a:06:0b:3a:a3:7c:a5:03:fc:6f:
         0c:a6:f6:9b:6f:94:8d:58:b0:25:b7:20:c3:45:e0:c5:5f:6e:
         97:ad:58:2f:44:c0:0c:b0:56:fa:2a:90:89:44:39:e1:99:ee:
         d6:35:69:65:32:66:86:12:d5:d9:1b:9b:ca:a2:69:83:fb:22:
         52:4e:0e:69:a9:75:9a:18:47:25:77:46:1b:05:47:23:d9:de:
         21:a3:df:9b:87:46:e6:49:45:dd:c7:85:c2:07:02:1e:5d:b4:
         7d:fc:fa:7d:5a:97:b9:97:46:ec:2c:37:3d:f9:47:02:bf:9b:
         0b:21:28:1f:43:49:1d:15:88:3c:b6:15:e1:2b:06:c5:26:0a:
         9a:ce:eb:81:ee:e5:66:5f:c1:f2:3e:0f:85:7c:21:8c:7e:ae:
         7d:23:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:44:13 2026 by rpki-client