Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bc4bb53-d774-3863-b845-5a3aab817207.roa
File:                     0bc4bb53-d774-3863-b845-5a3aab817207.roa (raw, json)
Hash identifier:          +XdGoeb1co9Cy3tsREFZRJFyJwof+e23M259aTGkgFM=
Subject key identifier:   68:56:5E:68:88:A3:11:F0:BD:B0:AE:2E:D6:81:6D:B1:A9:10:77:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CC92315A7778F8279F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bc4bb53-d774-3863-b845-5a3aab817207.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396614
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c9:23:15:a7:77:8f:82:79:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=f1fbcd66-2ed6-4efa-b366-3904b113a8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fe:41:09:5f:9d:e8:1b:6a:8c:a7:6e:0c:00:
                    56:43:2e:13:44:2e:a7:62:be:d5:1a:b7:53:1b:d6:
                    04:ab:e6:ed:86:e8:7a:6e:53:55:89:b5:cd:c2:e2:
                    ef:9a:8b:fe:ab:38:5f:3e:27:30:84:30:a2:94:f2:
                    8c:d6:e8:57:53:bd:b5:b9:53:9d:90:2c:1a:8c:e3:
                    95:d9:e7:88:85:79:5a:54:51:ac:06:41:0e:d8:b7:
                    16:ec:f7:4a:62:d8:07:a6:a2:b2:0d:c0:5f:ee:2c:
                    52:fd:d8:e5:50:d1:9e:51:69:c4:50:c6:fe:77:25:
                    fc:8f:e0:a4:3c:98:48:a3:92:a2:da:0e:36:8d:a1:
                    50:29:7b:c2:7b:dc:eb:ff:d2:f9:de:88:2a:fe:c1:
                    f8:c0:f7:6c:a3:f9:3b:2b:e8:8c:c9:32:b8:c1:bb:
                    2e:51:64:50:f7:05:8c:06:1a:7b:a7:20:70:2e:8d:
                    dc:af:79:9e:11:c0:63:27:15:2f:0d:be:59:ff:6b:
                    ec:b8:c2:d6:94:04:0e:10:40:5b:e3:8b:b0:1f:53:
                    40:06:39:92:88:46:33:ee:98:e8:c4:08:00:0b:c2:
                    f3:63:25:bd:ca:d2:6a:3d:11:43:18:99:f2:2d:ba:
                    57:f3:9f:f4:30:b9:94:ae:40:cc:9f:92:a3:cc:9a:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:56:5E:68:88:A3:11:F0:BD:B0:AE:2E:D6:81:6D:B1:A9:10:77:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bc4bb53-d774-3863-b845-5a3aab817207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:50:d5:5a:d7:5a:d6:f9:27:93:ae:77:1a:01:e1:7f:92:f5:
         6e:27:3e:bb:bd:61:d6:7b:b9:f7:6e:93:6c:69:f8:d1:1c:1c:
         b4:6b:ab:96:1c:e8:17:50:26:5f:0d:f7:5d:dd:a6:4d:10:8b:
         8d:d3:e7:67:e4:ab:1f:c8:87:4c:ab:18:18:95:4f:4e:67:21:
         d2:1b:54:90:ed:25:d9:09:f2:cd:f9:d2:c5:4f:eb:84:35:05:
         cf:1f:99:84:fa:f7:e0:e2:5d:34:cb:fe:a5:98:8b:80:eb:12:
         31:ec:36:98:8c:d1:43:99:c2:50:50:5a:e9:53:77:8b:ca:ae:
         89:aa:90:a7:10:7a:00:6b:78:3f:d8:21:7a:f7:d8:97:77:ac:
         4e:22:3c:7b:1d:5a:93:6f:50:1f:47:79:2b:75:d3:bc:52:d7:
         4d:39:ba:29:53:fe:6e:f8:ea:92:3d:f2:3a:94:55:45:f1:ce:
         ef:ed:33:8b:af:96:96:78:7d:81:b2:32:ad:0a:62:6a:68:5a:
         97:c5:2b:94:1b:03:18:43:18:e4:ca:60:d3:6a:fd:aa:2e:26:
         9b:45:13:57:9d:83:40:9c:2c:d9:03:30:bf:5a:c2:41:d9:df:
         26:c3:24:e2:88:23:1e:ee:f3:2e:6d:91:b9:f6:0c:e3:7f:04:
         e6:73:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:02:28 2026 by rpki-client