Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3df0a727-ea87-348a-8f6f-059ba07bec81.roa
File:                     3df0a727-ea87-348a-8f6f-059ba07bec81.roa (raw, json)
Hash identifier:          nxbdeZFlesumuJhcREYj8xXXn0uqp76eXNLJ37B05o4=
Subject key identifier:   F6:58:BF:CF:3F:AD:A8:35:20:25:71:08:31:91:2E:49:BB:CF:B7:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584FB0BDF0611DA1382A63332060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3df0a727-ea87-348a-8f6f-059ba07bec81.roa
Signing time:             Sun 01 Nov 2026 01:00:13 +0000
ROA not before:           Sun 01 Nov 2026 01:00:13 +0000
ROA not after:            Sat 30 Jan 2027 02:00:13 +0000
asID:                     396590
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b0:bd:f0:61:1d:a1:38:2a:63:33:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 01:00:13 2026 GMT
            Not After : Jan 30 02:00:13 2027 GMT
        Subject: CN=236324b5-5ac6-49ad-af54-199842ce47ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:65:a2:69:e7:2a:c3:19:d2:0c:69:3b:50:
                    8e:af:17:8b:48:3a:9e:5f:de:58:13:08:41:df:1e:
                    6f:ea:92:ba:38:a8:f8:b2:4c:e7:e9:ea:c6:db:09:
                    61:7e:94:5d:ae:68:08:d3:b9:37:12:84:65:c5:12:
                    b2:83:dc:28:fa:74:f5:a2:1c:1f:56:e8:db:e0:26:
                    97:e1:7a:7b:04:07:cf:59:53:80:b0:ce:de:ca:79:
                    1a:75:35:a2:37:cb:94:fa:a1:61:6d:34:0b:e3:ce:
                    11:34:3f:5f:7e:5d:d1:79:23:9d:ff:35:40:3c:7d:
                    a4:86:86:d0:df:50:67:91:c1:02:ef:16:0c:52:99:
                    62:92:73:1c:ca:2d:04:5b:62:1c:28:a3:5f:15:f5:
                    98:25:a1:5e:52:4b:76:0f:d2:81:a1:4a:bb:cb:34:
                    42:31:71:06:64:6c:5f:fd:d1:44:be:ca:da:19:4c:
                    07:ae:3b:ba:19:cf:4e:86:8f:2c:09:dc:66:fe:01:
                    7d:01:89:8d:3b:f9:a5:5e:25:c5:ef:0b:af:12:ce:
                    f6:fd:93:06:b6:60:68:d5:26:84:9e:40:5b:f2:7d:
                    d8:9f:37:3e:81:19:24:2f:69:56:4d:3a:21:a0:f8:
                    a3:82:e7:48:e5:1b:50:05:ad:df:00:e9:42:80:9c:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:58:BF:CF:3F:AD:A8:35:20:25:71:08:31:91:2E:49:BB:CF:B7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3df0a727-ea87-348a-8f6f-059ba07bec81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:65:96:a8:16:63:ca:44:7e:8c:88:5f:36:0b:a0:6c:cd:1a:
         26:a5:d1:87:24:12:c4:3d:bb:b6:d1:0b:a5:45:a3:d9:d0:71:
         b6:ef:de:45:b7:b0:b1:a3:6c:47:6d:6f:26:aa:bc:25:ff:99:
         50:c7:57:0a:ad:7d:ac:c0:c2:5a:61:a3:04:32:d1:51:96:46:
         ab:3a:47:b1:9d:50:36:cb:54:9f:ba:1f:4f:2c:3d:6b:88:da:
         f6:8e:89:08:10:a7:56:ea:f4:ee:d7:1e:eb:57:a9:36:19:a4:
         03:6c:b8:0a:50:9a:38:3d:9e:15:4b:d2:43:d9:85:44:5d:73:
         bc:84:b6:19:2c:34:51:de:a9:90:02:df:34:a7:8c:06:ca:73:
         d8:9f:7a:bc:c5:13:bf:96:91:34:ff:bc:1b:d2:44:82:93:ac:
         ac:94:5a:4b:6c:4e:e0:5f:51:eb:65:d3:4a:6f:c8:26:d2:bb:
         b1:b5:5f:84:ea:4e:3b:f5:b4:1f:78:c7:38:60:20:12:ec:e3:
         f6:10:85:3b:7e:95:68:72:0f:d0:ef:82:f8:16:c3:48:ea:45:
         20:3a:8d:1c:f3:33:92:1a:e1:4a:ca:a3:1b:40:56:31:d5:4c:
         63:09:8f:b6:49:b7:1c:24:dd:78:c4:98:c0:a6:cd:3e:95:8e:
         b5:a0:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:18:15 2026 by rpki-client