Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126a88a-d5af-3ed1-8167-8ec8ffd4e7d6.roa
File:                     e126a88a-d5af-3ed1-8167-8ec8ffd4e7d6.roa (raw, json)
Hash identifier:          HY0Dhs7PU4XdwtEIuvArXOrD6SDvlQthOzRMSuJTwCc=
Subject key identifier:   5C:59:8F:7A:AD:0C:B0:6A:62:A1:0C:3D:83:D3:70:37:D2:29:8E:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49862E16E2D9284553220850
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126a88a-d5af-3ed1-8167-8ec8ffd4e7d6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396603
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:2e:16:e2:d9:28:45:53:22:08:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=65954865-f75b-435e-a011-549da3244a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:12:e3:e3:7c:8d:d3:81:1b:90:1d:78:bc:
                    f9:c6:ee:3f:68:58:f6:cc:b9:f6:c9:c8:c6:ac:0e:
                    61:a5:6f:79:d6:8a:73:d5:b8:fb:cf:b0:83:4a:4b:
                    1e:d8:78:81:54:4d:f4:03:9c:46:9c:f4:bf:f6:81:
                    bf:d5:db:54:da:c8:6d:ea:35:7c:e6:dd:a9:b9:44:
                    30:73:2e:f1:52:98:50:0b:aa:25:d5:2c:73:a3:98:
                    e8:5c:0e:0a:42:71:61:2a:6b:f8:c1:a8:11:14:57:
                    59:aa:4b:e9:b8:83:5f:39:c2:a9:8a:fa:19:42:71:
                    cf:41:2e:11:59:5b:84:18:53:0e:79:74:28:38:70:
                    99:50:07:cd:55:04:56:f4:d6:02:be:a9:35:8b:d5:
                    a6:e9:e5:d3:33:77:43:14:fb:79:07:8b:50:3d:cd:
                    58:f9:ac:9d:d5:ff:62:9f:2d:6b:21:c8:b9:c8:c7:
                    f5:d1:0b:70:8c:25:3e:e2:09:59:58:22:d1:58:0b:
                    76:31:6d:0c:00:1b:51:42:29:db:3c:40:eb:16:19:
                    6c:cc:47:8d:fa:d9:99:9e:18:9c:65:d0:22:d2:8a:
                    aa:02:2b:50:8f:b2:24:1f:c9:f6:91:15:63:af:e3:
                    e5:5d:48:8d:49:94:e5:35:47:6d:54:90:da:e4:16:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:59:8F:7A:AD:0C:B0:6A:62:A1:0C:3D:83:D3:70:37:D2:29:8E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126a88a-d5af-3ed1-8167-8ec8ffd4e7d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:74:33:7f:54:c5:ac:cf:fb:95:72:0a:26:86:40:c6:09:74:
         84:9f:38:c5:c0:db:fb:fb:b4:85:b3:f8:a0:05:a8:39:ad:83:
         84:79:03:a4:52:dd:52:78:9e:42:f3:0a:e4:f2:c9:57:1f:ed:
         ba:18:63:0f:14:80:87:17:7f:a6:bc:b9:19:33:bb:1c:07:31:
         83:6d:13:69:c3:d4:7d:b5:e3:28:e9:e7:4a:c4:39:96:a4:a5:
         6d:6d:18:b7:7d:6a:ce:71:71:a2:92:7e:58:2d:2a:0d:f1:21:
         30:37:68:44:a4:c6:5d:43:92:8d:c8:ca:1e:01:26:e6:d3:9d:
         cd:c5:9e:f3:ce:3e:e5:97:51:0f:5d:e0:4e:cb:05:be:a4:58:
         aa:0a:51:dc:39:bb:e8:ca:28:31:f7:e7:78:9c:a9:87:be:1f:
         ec:81:3b:35:c7:bb:cf:0d:8e:ba:e7:6e:9f:60:9f:3d:ac:94:
         d3:6a:0f:84:aa:86:01:44:48:de:de:ed:c4:9d:54:73:95:28:
         0b:9a:3c:39:bd:04:d4:8c:58:18:c7:d3:a5:c2:63:0c:40:7c:
         ae:6c:fa:23:2d:af:9c:e9:b2:d4:da:eb:9a:58:4a:e9:1a:54:
         83:de:25:13:26:7e:7a:04:78:cc:9c:c6:54:7f:fc:23:ca:b4:
         eb:1c:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:06:41 2026 by rpki-client