Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d4c8dd0-8ea7-35fc-8c6c-0cc07f5cfb75.roa
File:                     2d4c8dd0-8ea7-35fc-8c6c-0cc07f5cfb75.roa (raw, json)
Hash identifier:          QgBjOlBKs8XgbkWmxGmdRCMvCAP7E1/PuoevlWYfMYI=
Subject key identifier:   32:24:6A:92:27:26:9F:46:95:4C:2D:B2:66:2A:C8:D6:FD:C0:B5:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06726C456D9A6A5630BFB080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d4c8dd0-8ea7-35fc-8c6c-0cc07f5cfb75.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     27544
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:6c:45:6d:9a:6a:56:30:bf:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ed3f1215-63da-4735-aefa-dc7e550312b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:1a:be:c5:6d:e5:a2:b9:11:8f:dc:46:cd:
                    31:02:c0:2d:fb:9e:03:1e:0f:08:05:fe:3e:70:10:
                    97:94:b1:f1:7f:94:72:d6:1e:a1:df:33:76:5e:2a:
                    75:76:3b:55:9b:2b:01:b7:90:1a:57:99:17:f7:ef:
                    49:ec:68:b8:fb:cd:88:ad:b5:22:3f:63:8c:bc:1c:
                    14:ed:6d:df:98:df:f4:42:bf:a4:c6:35:88:76:5f:
                    31:c9:c8:d7:03:06:3d:3b:77:ba:5e:71:a5:2a:e2:
                    22:f9:dc:b0:9b:23:38:1b:a6:8a:18:3b:dd:27:89:
                    15:f6:18:ab:07:fd:52:76:36:f4:4d:ca:72:3d:fe:
                    ee:bd:dc:90:bc:83:f7:ba:d4:6f:e0:3b:5b:5d:48:
                    3a:b5:18:fd:b8:aa:27:6f:6e:17:0b:08:65:79:32:
                    0e:2b:80:e0:dd:01:3b:cb:ec:8d:3a:e5:e4:cf:3f:
                    22:d9:ca:89:2b:e0:7f:e3:dc:c8:c8:e8:4a:89:05:
                    41:a3:a1:9e:8a:65:50:c1:91:99:90:d9:b5:12:15:
                    06:d2:d1:d0:96:4c:02:73:f6:1e:2b:19:1b:39:04:
                    7d:67:a2:21:fd:be:58:17:c0:49:b3:30:ed:2e:f5:
                    01:d7:32:cb:e2:4c:d1:b4:6a:66:a0:8c:5e:b6:13:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:6A:92:27:26:9F:46:95:4C:2D:B2:66:2A:C8:D6:FD:C0:B5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d4c8dd0-8ea7-35fc-8c6c-0cc07f5cfb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:9d:1c:e2:da:a5:2e:8d:65:99:7e:af:17:f3:d7:a3:80:
         9e:84:72:81:72:3b:35:a3:c2:41:a8:db:2a:6f:2a:b4:4a:d0:
         6d:86:1e:c3:35:bd:f0:b1:cf:d9:0a:d0:03:d6:e4:8d:2c:b3:
         58:1b:93:c4:6f:ed:dd:28:fa:08:04:98:84:4d:c9:0b:94:86:
         3a:62:9d:61:55:68:12:72:aa:03:b3:48:d5:91:4a:4c:f7:68:
         52:99:06:93:ad:42:9b:cc:60:6b:8f:79:44:d6:01:e9:a1:f4:
         64:d9:bd:0a:f0:ec:be:4a:48:b5:2d:ba:4b:9c:30:f9:53:4c:
         16:b7:7e:be:de:2b:5f:73:f4:c2:67:9c:8e:25:ac:e0:c2:ee:
         5f:51:78:2a:4c:c9:25:1e:f2:ef:3d:b2:1e:9e:67:38:2d:fa:
         66:d5:80:a5:10:f9:f7:d0:b1:d5:2f:8f:c2:eb:9f:c6:c2:68:
         ab:79:44:96:46:4d:aa:0d:ff:10:62:24:17:91:56:6d:c1:70:
         8e:64:20:8c:d1:44:8a:84:e4:ea:8b:f5:f7:49:0d:83:73:e4:
         cf:16:a1:4c:aa:3e:9e:8b:7c:66:1e:6b:47:71:3f:3b:95:25:
         65:d4:cc:bd:cb:f2:ac:14:6d:65:56:f0:4b:c1:cb:60:c5:0a:
         69:17:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:38:28 2026 by rpki-client