Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
File:                     42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa (raw, json)
Hash identifier:          DmAiJ4ZDiNgy2Pqc3VyDFjWL0ygvUzomuZXGSZBzOzM=
Subject key identifier:   18:32:D3:E7:59:0E:EC:CA:D9:AA:41:F9:A0:70:06:ED:E9:23:05:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C2827DAC662A8058AEBB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     396584
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:82:7d:ac:66:2a:80:58:ae:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=e0f044e8-b26d-4371-b36b-04a33a53e350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:ce:9d:a4:10:3f:62:98:d5:49:9c:34:e6:
                    d9:70:aa:d6:d8:75:62:f9:6e:53:3a:64:00:15:48:
                    ee:5c:c6:90:70:31:d9:90:59:b7:79:bd:6a:bc:10:
                    6d:09:2d:6c:5a:9d:b7:da:94:01:5d:c8:1a:1b:74:
                    80:82:bb:be:d3:de:cd:22:52:50:1a:2a:13:9c:59:
                    9b:24:d6:4e:54:c0:b3:c5:a8:40:8a:64:d9:04:eb:
                    79:06:09:22:12:b2:10:8c:6d:cc:42:d9:47:11:88:
                    e0:d0:8a:49:ea:9b:09:03:bb:67:59:3f:3e:58:27:
                    12:98:65:98:cc:5c:e6:f1:79:f9:e7:90:fc:f2:55:
                    e6:c0:b4:61:f9:6d:a8:03:03:03:23:be:79:f5:cb:
                    71:a3:ae:55:6b:0d:a1:77:4c:da:e3:49:f8:40:33:
                    e7:35:87:d9:04:d2:be:65:05:fc:14:ee:2a:aa:f1:
                    2f:0a:01:2a:31:2f:c3:db:e6:a4:bb:8e:23:f3:6e:
                    1e:6d:a4:8a:dc:57:f5:23:21:35:9d:e1:1e:09:7d:
                    34:bd:79:64:64:c5:ca:6c:df:09:51:52:29:af:36:
                    cf:11:eb:f1:c2:7b:c5:73:bd:ec:d3:dc:c8:90:c4:
                    4e:76:bb:26:a5:5a:6c:b6:99:15:54:b0:aa:71:fc:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:D3:E7:59:0E:EC:CA:D9:AA:41:F9:A0:70:06:ED:E9:23:05:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:d1:81:b5:46:56:d3:e1:b7:53:37:43:36:ab:77:86:59:
         60:ea:10:cb:1c:64:a7:cc:25:5b:d4:7c:e1:5d:c9:cf:81:c4:
         b4:f5:61:46:0e:4f:5d:8d:4d:bd:bf:91:1a:3a:2b:47:f6:b3:
         e1:64:02:83:59:b8:4e:86:1b:f2:de:2a:eb:47:f1:5e:85:8e:
         2c:e4:47:b1:9c:0e:9f:a3:38:77:92:ad:7c:d2:fc:4a:0d:c3:
         a0:5f:eb:4a:7a:9d:e9:03:ec:21:b6:92:2d:d2:09:78:b3:cf:
         f5:ac:e9:d0:de:95:a6:12:42:fb:99:f7:ca:1b:01:37:a0:a8:
         c5:69:7f:00:1a:c2:e3:f7:8d:cd:c1:e3:69:5d:15:03:d6:e0:
         84:08:9d:d8:fc:b4:67:f9:2f:6d:c2:5d:48:82:48:bc:c0:f8:
         82:1d:60:22:74:81:58:52:af:80:6d:e3:2f:4f:01:d9:16:7b:
         8d:4a:d5:ea:9d:55:3d:19:8b:94:a8:9a:88:7a:82:e8:66:78:
         14:ab:08:cd:9b:c3:d4:18:da:33:f9:11:97:28:66:0c:82:88:
         04:dd:fc:cd:6f:f7:83:1c:70:a0:91:24:e5:b8:ab:2d:1e:92:
         99:75:dd:89:ab:fb:f5:fb:20:53:02:66:de:b4:50:81:45:5b:
         e5:dd:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:12:17 2026 by rpki-client