Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/496480af-da05-3b30-9ae2-f3ba237751d3.roa
File:                     496480af-da05-3b30-9ae2-f3ba237751d3.roa (raw, json)
Hash identifier:          JsPFWUCWjLX0fmeKLlbWi76SodZwvdajvfCeu/hbbRM=
Subject key identifier:   81:A6:32:74:51:3E:1F:92:25:D5:0A:C8:B7:20:B0:DD:91:BC:99:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C27E9A5F1AD81F8AADFC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/496480af-da05-3b30-9ae2-f3ba237751d3.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     36624
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:7e:9a:5f:1a:d8:1f:8a:ad:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=d97f8206-267e-4c76-90a2-6432dbd1b00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:be:e8:0b:a5:d7:33:f8:45:24:d5:d1:b0:
                    6c:20:ba:18:03:60:37:a7:18:d4:54:21:06:d3:94:
                    85:11:b8:aa:62:ca:19:35:39:5b:dd:10:7f:56:cf:
                    f1:89:e2:ff:92:c2:d4:2b:72:a9:e7:94:41:7f:f2:
                    33:f3:c6:36:5e:5d:b6:82:30:55:e5:ef:87:01:3c:
                    b1:1b:2a:1f:de:1d:ae:ac:59:d6:b7:f0:7e:ab:aa:
                    4d:15:59:c3:3f:4d:fa:22:61:0b:1c:ea:00:f1:00:
                    07:34:a9:2c:80:41:b2:85:d2:10:a0:83:9f:d0:4f:
                    aa:41:b7:fc:d2:78:eb:af:d1:bb:26:6e:4c:16:28:
                    de:81:de:a9:86:32:29:13:79:02:87:a8:f9:e5:a9:
                    d3:bb:b5:66:ee:69:ce:bf:8a:78:15:a0:31:61:35:
                    59:43:81:21:d5:e3:8a:7f:34:82:eb:25:55:ac:67:
                    bc:f3:0e:46:92:79:81:2b:c9:65:8e:a9:7d:3c:89:
                    f7:2d:65:7a:70:cb:9e:e9:ba:27:b0:33:e1:62:d0:
                    fe:4a:0d:14:fa:ac:cb:22:72:dc:23:d6:f0:1b:70:
                    ff:02:6d:68:9b:f9:3e:b0:58:22:f9:f4:57:86:43:
                    88:fd:d8:5b:54:63:77:f0:e6:d1:ef:1c:f3:f9:c0:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A6:32:74:51:3E:1F:92:25:D5:0A:C8:B7:20:B0:DD:91:BC:99:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/496480af-da05-3b30-9ae2-f3ba237751d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:19:db:d4:b3:70:b5:30:3e:e4:5e:6e:81:b1:3a:3a:61:
         6a:c6:7a:b3:2c:3a:b1:e2:df:08:49:3d:89:bc:ad:f1:87:db:
         91:b1:1e:cf:6b:cb:15:18:78:13:70:54:eb:d5:46:f6:b6:bc:
         fc:ea:29:d2:9a:26:bb:37:e0:67:00:2c:bd:df:81:83:17:ba:
         63:ba:37:7e:8c:fc:d3:ac:97:18:45:04:91:0b:f9:b1:69:0c:
         0a:e4:39:2b:9f:ef:0a:6c:27:40:bf:2c:2c:21:ca:70:7c:90:
         49:b5:31:ac:1b:d0:f8:77:72:ec:3b:6c:05:eb:ff:d5:bb:cb:
         9f:ef:7e:6a:38:d7:cc:86:75:9d:df:d3:e5:00:bc:30:a0:b4:
         67:2e:1a:c8:90:0f:7f:48:92:af:84:bb:d0:53:74:9a:b5:8f:
         d9:18:1e:2d:41:25:a6:23:b6:7d:1f:75:c7:d9:19:54:36:fb:
         07:4f:d4:79:c7:6c:ad:e7:25:60:d7:30:8c:f6:64:e2:20:b0:
         55:84:63:33:e0:71:19:9a:36:bb:2c:0b:6d:59:5c:ab:b2:b7:
         43:86:e5:5e:86:a5:ca:05:0b:cb:9b:3e:10:da:6f:27:4b:0a:
         03:7f:71:cf:8f:bc:e5:06:92:c4:28:15:08:e5:eb:3c:f5:fa:
         46:2c:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:59:46 2026 by rpki-client