Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9a3e32-76f9-37f7-a34f-a30b316cdfa1.roa
File:                     4d9a3e32-76f9-37f7-a34f-a30b316cdfa1.roa (raw, json)
Hash identifier:          TaGG5QslizfO4h7Nv52BQt+DBl7eokyb0AoWOm5cgrM=
Subject key identifier:   C5:F5:59:DC:F9:08:A2:C5:BA:5C:33:E2:A2:2D:5C:62:68:34:E0:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CB73CAAE9A7B19CF9CA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9a3e32-76f9-37f7-a34f-a30b316cdfa1.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396576
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:b7:3c:aa:e9:a7:b1:9c:f9:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=e0141070-376c-4898-90b9-8e5591adbabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:7e:01:34:29:ab:fd:5c:0b:11:65:d7:80:
                    4b:f8:7e:5e:eb:89:1f:62:6f:12:cb:18:9d:93:4f:
                    83:bf:4f:5f:9e:d4:ca:bc:88:bb:1a:d8:d9:02:d6:
                    4d:43:da:f9:98:6f:e7:07:ff:c6:4b:89:92:9a:1b:
                    78:d1:01:7d:8c:75:da:a3:61:b9:ea:5e:91:a9:47:
                    07:4d:08:38:63:dd:ee:11:d5:2b:80:84:d8:06:bd:
                    3c:a8:91:b7:66:43:f0:fa:a1:32:07:74:c9:e1:60:
                    c0:51:fe:c5:98:67:99:68:ef:cb:84:6a:b5:10:a0:
                    d3:37:37:79:ba:bd:bc:ac:f4:00:fa:25:5e:16:79:
                    13:01:79:07:2a:3f:1c:c1:be:6a:86:d5:ce:8c:f6:
                    84:c0:f7:74:2b:87:52:c6:b8:62:92:62:81:88:4f:
                    a2:35:74:14:3c:b2:af:dc:e0:5a:23:d1:11:b7:09:
                    a9:21:e4:35:1d:b6:d2:08:b2:ce:86:6e:c5:d6:ef:
                    36:73:01:39:18:81:02:a9:a5:28:0b:24:d9:27:e8:
                    2a:55:63:d9:ae:ad:29:33:8a:c2:f0:db:38:c5:63:
                    2b:3e:20:91:e2:54:26:53:ec:8c:e5:f1:21:6c:51:
                    4b:87:50:f7:06:57:56:c0:8d:bc:58:40:54:8b:b8:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F5:59:DC:F9:08:A2:C5:BA:5C:33:E2:A2:2D:5C:62:68:34:E0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9a3e32-76f9-37f7-a34f-a30b316cdfa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:fc:56:a7:da:85:ce:08:b9:ff:54:ff:dd:29:df:c3:9e:
         2b:5c:97:a9:c7:5d:36:19:cb:60:26:23:e1:f3:ef:2d:6d:3f:
         92:dd:a6:9e:3a:d5:62:f2:b1:e2:1a:b8:1a:1d:03:5d:06:3a:
         cc:c5:87:74:d2:db:b5:ca:b2:b4:6d:a9:a9:ba:99:a0:8a:8f:
         0b:bb:bf:2f:44:6d:a7:73:0b:26:01:87:13:f7:34:36:0e:31:
         e9:20:41:22:49:c7:a5:24:1a:e2:d6:62:6b:54:29:bc:1b:6e:
         27:52:d0:e9:c9:70:38:d6:ff:7b:2d:e3:4c:f7:3a:eb:3b:26:
         b9:f3:3f:52:30:c1:9e:ea:f2:f4:42:4f:fa:ab:03:fa:12:a2:
         7f:f6:2f:11:24:62:fb:7b:4c:d3:2a:06:0e:99:88:01:a8:44:
         87:a9:7b:0f:32:11:ac:16:ab:74:34:4a:1d:ec:c6:3c:61:b1:
         ef:2a:89:8e:6e:d0:a9:6c:21:5a:d2:5e:1a:9d:9e:41:21:88:
         00:fd:77:cc:d6:2b:d3:8f:fd:ed:7e:f6:d3:e5:21:06:e8:cd:
         22:b3:29:35:23:ee:22:df:cb:e6:32:5a:65:80:53:2a:bd:a9:
         4d:3b:5e:7f:4f:75:90:54:89:03:9b:fb:5c:28:29:2b:49:dc:
         6c:a5:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:19:31 2026 by rpki-client