Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5953e80-7afd-3036-8afa-956c4b455763.roa
File:                     e5953e80-7afd-3036-8afa-956c4b455763.roa (raw, json)
Hash identifier:          Dn3YtgCnFfebme3e0IG/gyZyhjJ7ujZu/LTx9B06FQk=
Subject key identifier:   78:B2:C0:B4:A3:AE:33:21:6F:B6:0D:67:17:84:C4:23:EC:3E:F9:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49745515F2D92D808AB48AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5953e80-7afd-3036-8afa-956c4b455763.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396596
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:55:15:f2:d9:2d:80:8a:b4:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1f1bb6b7-feea-44cf-beb3-9dfe08d7a827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:1b:aa:08:c9:29:93:2e:a8:d0:1e:fd:af:
                    a9:26:12:d4:1a:52:3e:ad:7d:2e:eb:3f:f7:20:69:
                    6a:28:8a:a3:60:32:d5:f2:69:5d:47:77:78:a7:c0:
                    94:1c:2f:a4:6b:92:24:0f:c3:16:fc:0c:4d:7f:eb:
                    c2:56:c2:02:7b:81:7a:20:97:61:b9:f1:92:39:cb:
                    01:33:54:b8:49:57:1d:1a:96:30:68:d3:31:83:7c:
                    44:76:89:fe:17:da:eb:e6:d6:05:0d:95:61:56:f4:
                    49:0e:ab:82:64:e2:da:dc:7f:8b:75:3b:21:5d:03:
                    14:40:c2:7a:34:98:62:f7:aa:49:d6:0b:69:ea:33:
                    de:4c:07:e3:a5:6d:41:aa:f4:a7:d9:89:f7:78:ad:
                    23:b7:79:e4:d6:7a:fb:21:e0:72:7d:62:d6:3d:41:
                    6e:30:fe:2d:0b:8c:85:5f:93:7b:26:18:87:54:b7:
                    1d:e6:da:f6:59:dd:df:81:68:d5:7a:08:83:5a:7a:
                    b2:28:73:10:6b:4b:58:9d:73:82:a0:56:d9:ed:35:
                    b8:33:b3:39:0a:48:a3:8f:74:9f:4c:a1:b4:b8:2f:
                    2b:b8:13:90:37:3d:5d:da:29:3a:ab:ff:5d:3a:be:
                    ca:99:18:19:6c:3f:aa:20:fb:ee:52:54:b1:2b:62:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B2:C0:B4:A3:AE:33:21:6F:B6:0D:67:17:84:C4:23:EC:3E:F9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5953e80-7afd-3036-8afa-956c4b455763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:05:c5:6c:53:82:e8:9e:a5:4b:d2:f0:4e:eb:af:94:0c:0b:
         f8:1a:26:53:bf:2e:61:df:db:3f:f7:1f:90:8c:ba:f1:71:a9:
         1e:dc:d7:23:ff:a0:ea:d6:f9:f2:04:9f:94:94:0d:7a:c0:a2:
         a8:b3:cf:ff:31:41:f4:12:77:1d:86:11:65:2b:0e:25:a1:41:
         b2:df:b3:af:ec:37:66:75:5b:7d:25:fd:ce:2f:84:7b:0e:e2:
         6c:05:06:a2:13:4b:92:a3:f1:35:80:11:65:8e:aa:b5:c5:2e:
         bc:8b:e4:8c:39:f9:1b:5d:13:0e:ac:9d:c3:a8:74:f1:47:56:
         6c:e7:1e:4a:38:88:fe:43:97:e8:b4:d4:49:56:fa:92:4c:6a:
         7e:07:22:c6:69:77:a5:c7:d7:77:c8:6e:40:d9:fd:b8:a1:76:
         07:fe:af:a5:be:47:e4:67:85:a8:69:99:87:df:79:b0:a3:54:
         1e:44:d2:99:fb:a2:ea:45:9a:1c:a1:1e:f2:ea:5f:cf:42:ca:
         0c:a8:eb:39:b3:66:70:f3:f6:b4:70:34:75:56:4d:27:bf:f5:
         4f:6b:08:69:b9:08:a2:7a:ad:42:50:1d:77:d5:02:29:de:92:
         a8:4d:18:40:88:b7:b1:9e:ae:b8:72:2f:e0:75:9f:bd:ae:ee:
         62:fd:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:26:24 2026 by rpki-client