Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e941bdab-95e0-3b6e-8b46-dacc56f8dbe9.roa
File:                     e941bdab-95e0-3b6e-8b46-dacc56f8dbe9.roa (raw, json)
Hash identifier:          IpRho6SYrt1rol4GJmgx/uUJ/ZKB+7qQs6iOOWjv9E0=
Subject key identifier:   FC:1E:34:42:E2:E8:74:8F:65:42:87:5C:56:E7:38:69:E3:29:76:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974E533BC81E110DF4B9F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e941bdab-95e0-3b6e-8b46-dacc56f8dbe9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396596
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e5:33:bc:81:e1:10:df:4b:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ca9555bf-8a1d-4f71-833f-0407afce2e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:e3:de:39:b9:ee:73:65:0c:db:0e:a2:d2:
                    90:3f:b4:cd:12:42:7b:8e:bc:91:23:39:b6:83:5c:
                    44:16:63:a0:ea:cb:45:97:4a:18:8c:bb:19:b6:71:
                    02:81:1f:ca:8d:87:95:0e:ef:1f:ec:82:4c:d6:c9:
                    f2:5e:1d:b0:96:7c:83:bd:10:c7:49:12:a0:72:83:
                    f0:10:59:90:b3:72:21:a7:65:ef:b8:75:7b:1b:0c:
                    94:16:47:84:5d:9f:ac:e2:38:07:06:f6:17:37:4b:
                    fb:f7:2b:01:30:25:ae:a5:c2:40:ce:bd:cd:84:58:
                    ef:59:b2:50:9f:1c:cf:19:0c:13:15:63:e0:eb:19:
                    f2:24:23:f7:ba:2b:96:69:e9:3f:d7:96:e8:f7:dd:
                    03:91:05:30:21:c7:b5:e5:c9:4c:e2:28:15:5f:0e:
                    b3:ff:2d:12:2e:dc:b6:dc:f7:81:f6:9c:84:32:17:
                    89:e8:75:31:86:a9:f5:3f:e4:b4:27:8b:94:89:1d:
                    69:3e:26:41:3f:74:f8:82:4b:a1:6f:51:0d:f4:20:
                    60:0b:bf:bb:e6:5f:08:ca:ce:a2:74:89:62:7b:cd:
                    07:82:51:95:4e:ea:ba:93:d7:1b:3a:1f:18:2b:59:
                    31:06:93:eb:c2:97:2f:7d:a0:22:6a:b9:1b:6f:9f:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1E:34:42:E2:E8:74:8F:65:42:87:5C:56:E7:38:69:E3:29:76:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e941bdab-95e0-3b6e-8b46-dacc56f8dbe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:02:3c:c6:7b:06:b5:9f:85:39:0e:cd:72:d9:48:2f:c4:29:
         53:ec:68:e5:12:0c:41:24:bd:25:9b:a4:b5:2e:a6:50:51:af:
         02:34:0f:91:0f:94:ee:f6:e5:c1:e9:1e:0b:4f:af:d2:79:72:
         93:d0:f8:85:64:48:9e:07:9e:48:37:60:e5:87:79:b6:46:9c:
         67:69:97:15:dd:ce:33:19:dc:f7:42:79:39:ef:13:c3:58:74:
         a4:e8:99:a1:89:5a:a5:b4:3c:27:b7:66:2d:0a:71:56:7a:a1:
         38:82:00:5b:23:3d:35:dd:f9:2a:f5:33:00:f3:ef:60:be:58:
         d7:97:7a:d2:61:6d:18:4c:07:71:40:82:87:00:34:18:a9:16:
         6f:e4:9a:2f:84:55:64:66:27:83:c7:ae:79:73:e7:70:3a:d8:
         ff:6e:4c:e0:00:e7:8c:0b:c1:2b:a9:74:e1:29:de:3a:1b:ac:
         91:83:9f:ed:3a:10:7f:b4:81:21:f9:87:8a:99:41:c2:76:13:
         2c:d6:ac:cf:d2:d6:4d:09:02:b5:0e:91:b1:87:86:1d:dd:f0:
         2f:d8:9b:36:e4:7b:44:f9:c4:9b:62:a1:06:37:44:64:55:3b:
         77:4b:f2:37:14:8c:25:a0:aa:18:04:3b:ff:d1:a1:eb:eb:78:
         c6:60:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:07:14 2026 by rpki-client