Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61715aa-c8d8-32f2-9610-b2185e779174.roa
File:                     f61715aa-c8d8-32f2-9610-b2185e779174.roa (raw, json)
Hash identifier:          hhbJZ3RZUR7Tfgulww1XpQ8h2Us/y2kuNbf5+YLWtgo=
Subject key identifier:   7E:CA:43:96:DF:38:6F:3D:EE:B4:6A:FE:C2:EE:A6:56:1B:B9:A5:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49883AAD9A77EABFD59C8800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61715aa-c8d8-32f2-9610-b2185e779174.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396586
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:3a:ad:9a:77:ea:bf:d5:9c:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=35069c98-9a71-499c-9359-a801653ea69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:b5:81:7f:31:20:3f:e6:0d:2c:b2:41:73:
                    60:c6:ee:c0:f7:78:c7:5e:b1:a6:ec:75:c8:8d:ac:
                    d9:cd:7a:e7:3f:03:d8:aa:a3:16:47:a1:0e:69:bb:
                    44:97:d1:b1:b1:61:07:d9:0b:22:e7:41:38:3c:6c:
                    ce:01:37:47:b6:c5:0d:24:d6:36:fe:31:91:98:47:
                    83:9c:f0:3f:f6:73:2a:81:03:dd:11:8a:a2:a9:ba:
                    7e:f0:6d:c3:af:4f:d9:aa:59:ac:16:0c:26:64:00:
                    05:7e:e2:ee:11:20:56:35:2c:d8:f3:4d:0f:f8:d5:
                    29:98:3c:fa:f8:48:41:25:02:3a:30:e4:a6:e6:09:
                    5a:ac:ca:4a:00:32:fc:c8:41:a4:bc:7f:6b:fe:c3:
                    93:42:1b:b3:87:cd:cc:18:85:e8:40:a4:36:70:8d:
                    6c:93:f5:70:36:6a:c8:09:c4:b7:d3:f0:3a:ac:1f:
                    1f:54:9b:e5:78:65:8d:25:87:c8:23:c0:60:60:e0:
                    54:c2:22:cf:3a:66:b8:b2:20:89:0e:99:3b:05:3f:
                    c6:2c:1c:22:ad:86:44:88:98:2f:9a:89:c2:4f:6c:
                    30:af:e4:04:77:ac:cb:d5:33:e1:2f:55:6e:64:4f:
                    44:6c:8e:4b:c0:15:57:4b:6d:80:fb:d8:bb:7d:56:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CA:43:96:DF:38:6F:3D:EE:B4:6A:FE:C2:EE:A6:56:1B:B9:A5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61715aa-c8d8-32f2-9610-b2185e779174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:2e:ae:8a:1e:a3:3e:d0:79:ef:a8:1b:60:76:ed:ad:be:
         a6:7a:28:2d:0b:30:c7:df:8c:0f:b4:bc:29:ea:1d:da:8b:98:
         bc:6a:0a:22:d7:8a:28:b8:83:2a:7c:c8:04:58:c9:ae:55:a0:
         ad:79:a7:84:46:8b:c4:b6:d1:dc:eb:16:d3:8f:ff:95:ff:91:
         ca:d9:08:8c:ab:d0:af:a8:58:95:a6:52:71:19:ed:61:72:a8:
         99:60:ae:fa:79:84:db:54:7a:c3:80:14:f7:e9:55:ab:fd:72:
         bd:1d:82:0f:03:57:fa:ae:23:35:e4:d3:b1:47:d8:fe:14:69:
         81:6c:b2:fc:3c:ef:e3:d6:83:0d:9a:25:5e:02:8d:d0:cc:29:
         67:d1:63:37:f8:db:b7:da:df:32:32:c3:99:cc:fd:2d:32:47:
         d7:f5:b6:51:50:03:28:a9:97:fb:ed:6c:1b:00:a2:06:f3:9d:
         a6:11:35:71:03:d9:77:c6:95:2d:e1:11:2f:5e:5a:4b:e1:86:
         3d:9c:f4:95:18:9e:79:d5:5b:a8:54:f2:d6:e2:8e:65:ef:91:
         d4:15:4e:9d:4e:df:f1:d0:b0:ec:24:8a:b3:ba:82:2b:c0:12:
         a3:ae:f7:bb:00:c9:78:37:18:be:67:f1:eb:e7:39:b5:f7:74:
         dc:e1:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:28:26 2026 by rpki-client