Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b75cf2d-1489-380e-8564-68bd4f4416d2.roa
File:                     3b75cf2d-1489-380e-8564-68bd4f4416d2.roa (raw, json)
Hash identifier:          Air/6+BJHoY4QLpwixil437p6dUUnnSVRy0SbsaHSN8=
Subject key identifier:   57:9D:C8:9C:11:DA:8E:92:A9:7D:C2:16:7A:0D:4E:97:52:DA:4F:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06729026C453C0FA07F8B700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b75cf2d-1489-380e-8564-68bd4f4416d2.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36622
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:90:26:c4:53:c0:fa:07:f8:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=819fd2bc-da79-456a-a071-27b8081b1fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:15:cf:d2:8d:a1:5f:f2:73:55:44:20:04:
                    c2:56:cf:f9:da:66:b3:66:a4:c5:5c:1c:a5:d3:cb:
                    c3:66:df:35:96:c7:6b:91:4a:08:41:04:39:b3:a9:
                    f2:6f:47:a8:be:ef:9c:1c:2b:7d:22:4d:b0:ff:98:
                    00:21:16:d5:18:5d:4f:60:f2:09:3e:b7:7d:b4:f3:
                    48:af:14:0d:a7:81:ef:b0:00:5e:61:d0:f5:cf:af:
                    41:ec:cc:02:1f:2c:62:83:3e:9e:d7:cf:24:36:c8:
                    35:5e:87:9a:59:8f:ea:c9:12:a2:b1:00:e1:a4:04:
                    c3:8f:27:5f:f3:e6:60:49:54:72:60:4c:35:8e:a0:
                    e4:ec:bf:5c:1f:58:bf:22:f2:1f:af:a9:20:28:37:
                    26:bb:2d:77:f5:38:00:81:25:18:07:eb:a1:5b:da:
                    26:0f:6d:90:02:f8:3e:a6:cd:3a:70:27:45:d8:54:
                    10:1a:83:18:c5:fa:0f:01:d0:3d:aa:9b:fe:00:c7:
                    ed:3c:4a:6f:b2:70:82:60:28:ea:88:59:0a:af:36:
                    6e:7a:15:a6:dc:50:99:17:70:64:b8:64:7f:7f:e0:
                    b1:c3:e1:7b:2d:90:a8:e6:5d:60:54:69:10:de:2b:
                    f4:f6:ea:d4:7b:6a:77:00:c7:22:2b:af:9e:89:f3:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:C8:9C:11:DA:8E:92:A9:7D:C2:16:7A:0D:4E:97:52:DA:4F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b75cf2d-1489-380e-8564-68bd4f4416d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e0:c8:3e:19:f2:7d:88:5b:36:cb:41:e7:e1:ca:53:96:05:
         0a:6a:a7:a7:e9:cf:b2:3c:69:a2:15:01:67:e2:29:f4:64:59:
         92:f9:c7:97:f7:db:7f:70:25:7a:a3:18:b8:cc:95:1f:04:25:
         7a:44:1a:2c:c4:46:db:da:ca:49:c0:ab:0d:06:d6:ea:7e:37:
         4e:c8:80:75:cf:93:be:8b:79:01:2a:9c:ee:a2:a1:f6:98:df:
         2e:5c:4e:e9:81:e9:71:28:f9:97:a4:c0:ac:47:33:20:30:05:
         a3:de:77:7a:60:08:ed:fe:61:e5:6a:87:44:e0:77:3c:dd:43:
         9f:d9:d5:7d:b0:6e:01:9f:56:06:64:9d:b0:bc:20:bf:f7:4c:
         cd:57:6a:08:d3:4c:f6:c6:a5:f2:e1:b7:f4:d9:bb:8b:dd:9b:
         2b:af:16:f2:d8:8a:13:a5:89:30:6b:02:18:33:74:c2:67:6a:
         1b:c3:85:8d:1c:54:c9:66:aa:71:0e:32:d7:62:cc:82:d6:59:
         77:fe:aa:10:72:98:09:b6:f1:53:24:4b:2d:37:37:1f:ea:df:
         63:d7:90:c0:d7:87:fc:fd:e3:de:df:cd:0f:31:d7:d3:4d:ce:
         3b:10:07:64:ef:5d:ac:d2:9b:a5:4a:78:51:4c:c0:f1:ce:0e:
         79:2e:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:23:09 2026 by rpki-client