Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73e9cef-99bb-39af-ba81-96c8c88618a6.roa
File:                     f73e9cef-99bb-39af-ba81-96c8c88618a6.roa (raw, json)
Hash identifier:          jUI/Py1PUL7ywwsDr5Qbfmmh7NG65eyl0i3gwWtiUb0=
Subject key identifier:   8D:95:0D:C6:F5:02:D0:B7:FD:71:DC:82:01:46:85:3A:1F:C5:87:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFD00A7A5EA2B45AD8800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73e9cef-99bb-39af-ba81-96c8c88618a6.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396603
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:fd:00:a7:a5:ea:2b:45:ad:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=8f9dc7c9-7335-41bd-bf9b-d8342f5d1bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:f4:47:28:09:8b:3f:dd:df:78:00:41:cc:
                    5f:8c:41:f6:0c:73:fe:f2:1f:f5:85:38:ac:93:66:
                    3f:cf:4b:eb:24:9e:95:c2:2d:2c:fd:a7:99:74:48:
                    14:36:0f:13:4a:cf:dd:a9:77:c6:ee:b0:0a:21:d2:
                    96:ea:d0:33:d5:f2:23:88:c3:7d:32:d6:24:d0:72:
                    af:ca:ba:bc:f8:62:ae:4e:4b:6e:19:b6:c3:56:53:
                    a8:78:2f:db:21:a3:ea:74:6d:1b:77:fc:07:2e:37:
                    d5:16:6b:52:4d:4f:57:54:34:63:f0:3a:07:06:b4:
                    fc:ca:1a:ba:7d:57:34:8a:98:10:b8:aa:3e:0f:47:
                    02:4b:ff:0f:47:99:7a:45:15:8b:a0:ac:6a:48:79:
                    68:cc:37:3a:d7:e3:34:48:db:d0:6d:e6:0d:59:df:
                    55:47:4c:eb:c9:57:09:e7:41:c3:29:a6:85:4b:a3:
                    cb:c2:b0:aa:a6:8e:78:e5:cf:3b:73:ac:28:16:cd:
                    f3:e4:b5:ca:53:cf:7f:ce:eb:2e:c4:ea:87:e8:96:
                    00:1c:f9:f6:59:84:5e:c8:d2:c2:5a:ad:06:19:fe:
                    e3:a7:10:f6:b9:07:6f:db:3f:5e:6f:68:52:9d:00:
                    94:7d:ca:e3:a3:c5:bf:65:c9:db:a9:83:d4:3a:d1:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:95:0D:C6:F5:02:D0:B7:FD:71:DC:82:01:46:85:3A:1F:C5:87:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73e9cef-99bb-39af-ba81-96c8c88618a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:c2:88:f8:8c:8d:2f:30:f7:2d:7b:21:c1:2e:90:3d:2c:
         c9:b8:09:b2:f0:01:6e:fd:a5:04:72:8e:31:90:90:13:31:92:
         bb:8d:e7:e6:58:06:29:f9:f5:c3:25:2a:fc:98:83:7a:97:5e:
         23:c4:74:bd:04:f3:ab:aa:4a:8a:d6:b0:9e:b4:f4:bc:58:10:
         4f:e1:4f:b3:56:a7:a2:b8:98:1a:5c:14:53:a5:55:b0:68:10:
         10:8f:c2:ba:a4:ce:33:8c:95:be:b2:88:09:8a:d4:09:44:fc:
         c8:fc:32:c3:2f:0f:92:34:cc:0a:79:46:b7:a9:1b:38:fd:d6:
         77:65:e8:26:4f:2f:fe:25:37:45:96:95:63:07:fc:2b:1c:3c:
         f2:49:aa:f9:9b:9d:ab:24:70:fa:7d:32:cc:15:61:91:73:95:
         a6:47:bf:38:86:2b:1f:02:f2:43:34:67:5c:7b:72:14:f9:e6:
         bb:1f:21:bf:be:fe:18:8a:56:d9:08:5e:3d:ec:39:a5:fa:7b:
         4a:f3:b0:ad:e1:0c:ab:e0:a4:ac:1c:a0:e0:3a:22:3e:ca:f9:
         53:0e:f4:7a:f7:ef:a0:a5:6e:57:9b:26:93:2c:3d:aa:8f:17:
         6f:84:ec:34:9d:f4:26:c7:c8:34:26:6b:b7:8d:c4:4d:60:d9:
         45:62:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:06:19 2026 by rpki-client