Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
File:                     40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa (raw, json)
Hash identifier:          AbduAozWYEDVmbg6+pJx2uHyo2LPpFUVlMWTAwrYvug=
Subject key identifier:   82:36:2F:3C:35:F7:45:B6:D5:1E:1A:1B:CA:BE:37:84:CE:59:B1:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7B94A20CFFFCF8052EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     211369
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b9:4a:20:cf:ff:cf:80:52:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=1a92ac3a-4273-49e7-8a85-2593110f99b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:85:b4:e1:72:db:13:1e:6a:50:24:40:15:
                    36:cc:2f:de:7b:54:25:56:6f:13:e7:ad:42:1e:e1:
                    00:3f:14:a9:d7:4e:c0:cd:89:05:26:cf:9e:9a:2f:
                    9e:d0:8f:42:e4:92:65:29:56:c0:fb:69:6c:53:e4:
                    07:3d:a2:06:a7:53:1f:0e:2b:22:76:57:2f:b3:22:
                    7e:3c:f3:b7:49:69:d5:0a:33:6c:3c:a9:b8:ba:5f:
                    d7:11:03:3c:c9:16:27:53:f0:9f:98:76:7f:25:fb:
                    c7:b4:4f:0e:2a:7a:96:fe:70:8e:f2:f0:88:f6:85:
                    80:8b:2c:c4:68:fb:d7:16:67:59:d0:8c:b2:15:a8:
                    29:61:af:58:e2:a9:a0:3c:be:05:8e:6f:97:aa:c9:
                    70:e1:fb:7a:c5:79:50:83:46:2a:35:43:f2:1f:eb:
                    b0:9c:31:4c:04:c8:28:38:05:e7:96:2e:94:e3:db:
                    16:eb:af:01:cf:51:36:35:3c:a8:f1:de:aa:f0:e3:
                    a2:75:80:0d:ee:9d:8c:4f:c6:61:11:2f:02:5c:8d:
                    da:cf:b1:79:4b:21:65:42:ab:e2:1d:8d:66:fd:5f:
                    e9:78:5c:80:24:b4:2c:94:45:30:d6:9e:b9:56:d5:
                    d5:22:32:e4:d0:2c:2d:8c:29:5b:e0:18:0d:dc:2d:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:36:2F:3C:35:F7:45:B6:D5:1E:1A:1B:CA:BE:37:84:CE:59:B1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:32:41:3a:a6:b6:22:ef:3f:fd:38:08:e2:4d:be:d1:90:
         f3:ff:98:59:71:3f:39:b7:74:eb:5b:2f:ea:85:4a:7e:cc:8a:
         27:c2:54:3f:36:3b:a9:58:4c:1c:4b:3f:c1:bc:89:4a:29:4a:
         07:df:da:7c:ca:09:e2:3e:59:11:1e:ec:fa:18:b5:07:ff:f6:
         0e:80:f0:b8:50:be:c2:c3:9f:17:67:ad:7f:a8:ed:27:a2:53:
         bd:8a:0b:37:0d:08:a4:83:31:9c:dc:ec:89:bb:65:50:af:98:
         86:50:95:77:82:ec:b5:d4:bf:05:d4:47:25:d3:00:2b:f8:4d:
         c5:21:39:f9:46:f4:52:e6:1b:28:2b:f5:f0:1c:41:0b:b7:a7:
         13:b9:8c:a7:bc:24:6e:35:f8:36:4a:24:7e:17:5a:94:b4:fc:
         9c:b2:6a:44:e9:6f:5c:a4:df:96:29:4b:36:4c:c5:79:f3:33:
         b1:27:2a:f5:60:c4:ca:3e:e4:4c:ae:d7:90:61:16:53:dd:c3:
         cc:5c:64:4f:b9:12:f8:0a:37:c3:20:66:05:da:22:c4:18:d4:
         be:87:7f:ea:5e:3b:7d:1a:5c:66:63:9c:98:45:f0:d7:86:27:
         5f:1d:55:f0:bc:69:7b:4c:75:6c:e1:15:69:d6:64:fc:8e:de:
         ef:77:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:02:36 2026 by rpki-client