Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470093f7-1c0a-30a1-9416-6b8163d4ecfd.roa
File:                     470093f7-1c0a-30a1-9416-6b8163d4ecfd.roa (raw, json)
Hash identifier:          4sc1Do+51q/cXBjtgmOp3IjjkBGVBZXdKUQZIw7ksFQ=
Subject key identifier:   D4:67:39:6F:59:52:BC:82:71:16:7F:E4:37:B2:56:C5:33:E0:F2:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727FD77B3C6778438D2480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470093f7-1c0a-30a1-9416-6b8163d4ecfd.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397205
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7f:d7:7b:3c:67:78:43:8d:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f04cbfd7-d63c-40d2-b978-007833967305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:9e:38:35:b3:e9:cd:d9:43:1e:b5:c4:47:
                    d5:fe:9d:04:9c:3d:f9:5d:df:90:8d:5b:16:6f:e1:
                    7f:ff:37:48:06:2a:f6:a3:cf:2c:0e:ff:6a:4d:90:
                    52:22:32:b9:b8:8c:98:d8:cb:f9:bb:ce:7b:0c:ab:
                    35:3f:ef:57:e4:af:c3:4e:68:8e:e7:ca:94:f4:b1:
                    de:85:27:a1:50:72:59:80:55:be:87:69:09:16:f0:
                    5c:4f:34:01:57:1c:97:c0:25:ee:f6:c8:dd:c8:3c:
                    4c:01:b2:85:68:0c:1d:93:ad:ff:da:27:00:01:27:
                    77:6a:d9:81:2b:61:49:98:33:cb:18:03:a3:95:65:
                    21:ff:f8:0c:e1:07:70:43:cd:d6:b5:e9:96:c1:1c:
                    b6:ff:65:6b:ee:26:f9:ea:7f:a5:dd:dd:11:31:74:
                    cb:92:7b:a8:af:72:43:ee:6c:76:e3:26:3c:65:29:
                    81:88:10:33:c9:a4:be:e8:a8:c3:99:e0:5a:a3:e3:
                    3f:1c:6b:41:03:93:de:be:78:da:58:89:ce:3d:4e:
                    fd:00:22:fe:b6:1b:ca:8d:ec:53:41:2b:2a:6b:f2:
                    6a:9a:ec:9f:a4:16:c7:41:86:24:fe:ca:b9:e1:b1:
                    18:98:e0:0f:f4:2f:06:a2:92:46:30:bb:29:19:b4:
                    17:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:67:39:6F:59:52:BC:82:71:16:7F:E4:37:B2:56:C5:33:E0:F2:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470093f7-1c0a-30a1-9416-6b8163d4ecfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:b1:53:2d:21:78:fa:3a:82:87:dd:d8:f6:b6:75:d8:1c:
         7c:20:30:8d:1f:93:e3:0c:78:b4:51:0a:3f:db:a7:b1:9c:be:
         d1:0a:03:ec:2e:1b:e8:dc:6a:78:c7:82:72:53:f3:b2:c4:24:
         a9:0a:fa:8e:7b:db:40:ef:ac:3c:84:fb:3c:7b:7e:08:68:1a:
         9c:a6:b7:76:bb:72:c0:11:45:58:dc:78:bb:ae:f1:e9:bc:d1:
         69:41:ec:be:d8:8d:3e:2f:2d:bd:4a:65:96:e3:37:0b:73:6d:
         7c:f4:cf:7c:b8:bb:de:ad:8a:07:2e:b9:1c:f1:bf:ed:7b:c8:
         91:30:83:d3:13:14:74:fb:75:99:60:56:54:66:48:dc:b1:7a:
         39:c5:d5:ad:48:d6:7f:e8:10:4b:e2:c9:c1:52:41:84:67:e9:
         b9:34:a3:d8:54:7b:3c:0a:c1:7d:d7:24:04:7f:a1:71:37:e4:
         fa:0e:63:47:5e:fb:b0:42:1d:49:9d:e1:39:e5:c8:9a:0b:e7:
         31:c0:ce:80:e1:41:2d:a3:81:12:0d:c1:93:8e:26:f9:59:59:
         3f:1d:82:e3:8a:26:b2:ee:b4:ed:fe:ad:24:a1:e9:01:c8:81:
         bb:dd:3a:9b:e0:13:f0:75:8b:a6:1a:ff:36:75:a4:4d:9d:9e:
         74:e2:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:47:17 2026 by rpki-client