Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a20d117-c99a-3aa3-9c69-16dd152be9df.roa
File:                     1a20d117-c99a-3aa3-9c69-16dd152be9df.roa (raw, json)
Hash identifier:          IsR2jkyU2gsx9Cps5DBhOVwmYJiMdgLeU7TK1Smc72U=
Subject key identifier:   6E:0D:BE:07:A3:B7:A9:D7:64:77:07:FA:74:FB:3C:22:14:BA:75:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727ACD53ECE45729889E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a20d117-c99a-3aa3-9c69-16dd152be9df.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396540
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7a:cd:53:ec:e4:57:29:88:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=6c8747e8-fee6-4b84-9372-bfcab236af9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:61:79:ec:93:6d:3d:03:b7:1b:19:e6:99:
                    ad:a7:95:6c:ab:1a:f1:07:7c:3c:b8:a3:fc:88:42:
                    6f:c2:8e:bb:8d:57:65:b4:7a:a9:ef:c1:70:da:c9:
                    6c:ef:dc:df:56:31:6e:66:13:7d:96:99:08:a3:10:
                    9e:b2:b3:5a:87:b4:22:b8:3a:09:81:bb:43:ed:49:
                    bf:a8:85:51:d4:a6:46:1c:6b:d4:6b:e1:69:34:4e:
                    12:a5:ad:e9:5f:b0:1b:9a:f7:8f:9a:1d:81:c5:61:
                    ba:51:ce:3e:9c:75:0e:7f:be:90:85:61:ba:a6:e2:
                    49:70:91:fd:5f:eb:d2:b2:d2:de:5f:e0:a5:a1:0e:
                    6e:59:78:41:f4:80:eb:cb:d7:50:3b:65:d3:fe:32:
                    2b:e8:4e:34:d2:5d:76:a5:f9:41:1e:dc:5f:a5:2f:
                    8c:2d:21:99:22:57:d0:fb:91:70:9b:7b:4f:85:97:
                    9f:0a:bf:02:9c:6e:e6:2b:fb:36:46:9b:f4:12:1f:
                    5d:c3:39:84:a8:56:af:63:e7:a9:ac:13:38:45:35:
                    3d:38:ab:28:3c:d5:9c:ce:f6:ac:37:a2:8a:23:6d:
                    c0:4e:10:e9:30:81:96:df:5d:3b:7e:47:c7:76:f5:
                    e1:a1:d7:64:6b:0e:d0:9f:b0:4c:23:93:6d:52:e7:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0D:BE:07:A3:B7:A9:D7:64:77:07:FA:74:FB:3C:22:14:BA:75:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a20d117-c99a-3aa3-9c69-16dd152be9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:3e:92:2a:2b:b5:98:3a:a9:b8:a3:3b:74:ef:07:b5:f4:cf:
         4b:f7:ce:17:63:42:79:37:dc:06:fb:a3:76:ec:e6:d6:53:ee:
         50:95:2c:be:36:c3:3f:ee:9e:ca:bd:9b:4a:ea:f2:94:2f:65:
         87:a5:ef:68:80:32:de:93:88:07:bc:5f:f9:e9:4b:e7:54:23:
         2a:99:43:88:34:43:f1:ac:fb:d0:d0:13:16:bf:7a:2e:b8:a6:
         5f:78:26:40:df:b2:42:ca:1f:e2:37:5e:14:85:f3:db:3d:f8:
         44:2a:63:9e:b6:e2:9c:74:f6:fd:9f:21:aa:39:03:15:44:c3:
         9c:51:a4:02:ee:37:bc:7f:a9:b0:e9:85:e1:fa:8f:ca:09:ab:
         4b:cc:7b:58:fb:59:e8:e2:ab:fe:27:ea:89:df:80:87:83:2e:
         c6:a3:66:7b:00:72:05:3d:a8:06:3a:b9:71:82:86:d8:ac:cd:
         0c:32:cc:d4:12:31:4e:a7:21:48:d7:f1:1a:83:d6:d0:c0:6a:
         d1:d2:b9:c0:8b:18:d7:42:65:f2:6c:70:3f:b8:31:c3:33:6c:
         de:b4:a3:37:f4:17:fb:5e:44:e7:5c:46:0d:ab:3b:99:55:b7:
         7d:14:89:d4:da:f7:ee:a2:01:8b:e7:d9:dc:7c:d5:11:b5:1d:
         c6:10:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:03:25 2026 by rpki-client