Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4114d3b9-1ee3-3567-86b9-7067fbb761b2.roa
File:                     4114d3b9-1ee3-3567-86b9-7067fbb761b2.roa (raw, json)
Hash identifier:          FGDkvgaEqECy41oi1RmRaaxEZq5Jzgxu350uBZ8U2iE=
Subject key identifier:   03:5B:89:91:EC:E5:FA:A2:4B:8B:3C:66:E8:6A:CC:BD:8F:67:2C:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498AADDA64E8BF1AC43E7B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4114d3b9-1ee3-3567-86b9-7067fbb761b2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397211
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:ad:da:64:e8:bf:1a:c4:3e:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=294b80a0-6dd0-4dd0-a01d-a4da934b8ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:ec:26:03:76:6b:30:22:c4:ee:45:a5:86:
                    f0:3e:80:e1:45:1f:e9:11:34:6c:37:aa:0b:35:c7:
                    fc:25:f1:1a:87:5a:25:dd:14:17:41:79:fd:1e:77:
                    28:25:8d:15:4e:39:d4:5b:f7:e4:24:7e:cb:ac:09:
                    10:78:19:42:3c:f2:2f:9a:e7:10:a6:fb:39:c8:c7:
                    38:bc:e1:37:12:5b:b7:5d:43:71:3b:09:cf:93:63:
                    11:2a:08:bb:ea:40:9a:74:9d:98:28:47:09:c0:ae:
                    50:69:5a:b6:1a:be:39:1c:fe:23:d5:a5:93:cf:d3:
                    14:30:7d:ad:6e:a9:ca:2a:f0:e2:17:3a:c1:e5:65:
                    95:b9:64:0e:16:ed:17:89:41:07:c2:67:26:e9:aa:
                    5f:0a:f5:81:98:5a:74:cf:bf:58:aa:7d:63:49:75:
                    0b:0a:f8:42:b8:40:6f:15:d6:61:e6:cb:76:6f:98:
                    9e:7a:17:12:db:8c:c6:0e:32:e8:ec:ca:38:87:4a:
                    ca:30:94:41:06:c0:c7:e1:e1:58:25:59:e7:fb:25:
                    c8:f1:d6:93:b4:2a:a1:89:ef:e5:08:5c:b7:71:21:
                    da:a1:f1:ae:cd:1b:10:c2:4e:52:cb:bf:c2:87:f9:
                    e6:78:80:d5:a9:ea:02:7e:fc:2a:67:d9:1d:e2:49:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:89:91:EC:E5:FA:A2:4B:8B:3C:66:E8:6A:CC:BD:8F:67:2C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4114d3b9-1ee3-3567-86b9-7067fbb761b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:33:3d:f9:e8:bd:24:3e:08:54:78:d0:ae:47:44:7d:d8:96:
         d2:ec:02:01:e8:ec:38:88:e5:6a:09:98:bc:7a:00:5c:16:01:
         d2:a3:d4:97:61:70:5c:13:66:98:e7:fb:a0:6e:31:86:e1:95:
         99:2b:92:49:00:3f:73:18:99:99:97:aa:17:9b:c1:50:f7:33:
         24:b6:6a:d6:14:e1:3d:a0:2d:a8:36:7e:8d:b1:e9:8d:31:e4:
         47:63:9d:be:1e:ca:82:44:95:ab:43:8f:09:09:03:bf:e3:51:
         e4:8b:42:fb:a8:69:d2:9b:3b:6b:7f:1d:4a:17:79:88:50:38:
         db:5f:30:bc:00:db:16:1a:d5:5e:a3:76:c0:e6:74:1d:2b:17:
         a7:bb:40:c8:d6:83:fc:5c:b7:e5:a1:fa:bc:bc:89:0c:4c:0f:
         65:39:bf:e8:df:b6:0f:44:f6:6d:4f:a2:34:34:1d:30:6e:f8:
         09:70:9b:0a:e7:5e:73:98:9f:6b:0c:41:69:91:95:47:07:9c:
         d6:19:6e:22:95:0d:49:a6:07:b8:7b:51:e3:bb:a0:58:57:4d:
         37:8a:e9:a6:d9:12:ac:f1:bc:ed:c3:f3:ad:d0:52:3c:c1:3a:
         7c:44:c3:23:0e:e1:77:a9:26:2c:d1:4a:43:46:cd:39:92:64:
         97:99:e7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:08:31 2026 by rpki-client