Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507a9079-c693-3918-b2ee-2e22dc1dbaba.roa
File:                     507a9079-c693-3918-b2ee-2e22dc1dbaba.roa (raw, json)
Hash identifier:          U9DcW/XIT+jubV4ZByBdGf1Lwa1HW81vn2sef4pXpE4=
Subject key identifier:   82:1D:6A:1C:B3:FA:82:1C:13:6C:35:76:1A:CF:B8:76:FB:23:E4:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0672704A4CF8318B80D36E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507a9079-c693-3918-b2ee-2e22dc1dbaba.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396599
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:70:4a:4c:f8:31:8b:80:d3:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=736ea982-062d-400b-9aee-1e79d6b97aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:0c:44:f0:44:e6:e1:9d:9b:c3:21:d8:91:
                    96:c8:46:e8:ea:cc:e3:7d:24:b9:fb:42:26:38:41:
                    d8:cb:09:0e:56:bd:f3:3a:58:aa:38:ed:c4:b9:43:
                    8e:06:1a:57:7f:83:36:29:ec:1d:46:21:d1:20:1a:
                    fe:fc:7b:3e:17:20:bd:70:81:9f:b2:1b:57:7a:57:
                    23:39:ac:2b:f6:00:51:68:df:b5:30:69:4e:ba:ff:
                    51:02:a4:12:3b:09:9f:06:17:54:f0:4c:b0:63:72:
                    6a:5d:d7:de:ac:b5:f7:6c:5a:81:91:e2:10:3d:30:
                    31:12:ed:37:eb:19:b3:58:77:cd:86:c8:1a:91:cc:
                    48:dd:6e:b4:f8:34:1f:92:6c:b4:84:41:52:28:db:
                    87:7d:2b:85:ee:fa:08:8e:09:5d:5d:52:f0:74:90:
                    de:0a:3f:e5:94:a3:0c:dd:1a:b8:2a:2b:95:68:a3:
                    37:57:65:76:07:25:e8:9e:ca:7c:e7:33:02:d5:8d:
                    46:a1:a4:06:ab:bc:1f:a1:34:a2:ab:e9:6c:aa:bf:
                    95:72:9f:67:b8:86:a1:98:50:ad:6f:a4:d0:e8:2b:
                    75:e1:86:15:50:59:37:50:ce:bd:f4:41:1a:34:41:
                    07:3b:d3:af:bb:5e:b1:fb:c0:4f:80:f9:3f:73:ce:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:6A:1C:B3:FA:82:1C:13:6C:35:76:1A:CF:B8:76:FB:23:E4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507a9079-c693-3918-b2ee-2e22dc1dbaba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:ef:23:e8:94:11:0f:db:ab:f9:e4:b6:ba:8f:47:1c:94:
         e5:0c:96:c5:44:77:69:f8:d7:8c:a4:4b:35:ce:b5:72:ac:25:
         be:bc:ab:27:ce:ab:32:2b:e2:e5:32:11:0a:62:16:c6:c9:36:
         94:ed:fa:82:e7:92:7f:20:1d:fe:90:23:72:58:c8:40:9f:0f:
         0c:a4:26:5f:98:0e:d9:a5:f4:cb:0e:f3:03:01:84:28:84:92:
         ae:f7:21:bf:c7:a4:92:c2:53:95:2d:a0:75:ae:71:c5:6d:db:
         cc:4a:9f:99:7e:b7:17:26:14:ba:72:00:52:b2:ce:67:61:d3:
         5c:38:7b:36:e4:d6:f8:2f:ee:7a:e9:2a:a4:f3:0e:36:02:88:
         25:42:24:f3:31:92:30:34:5d:43:a4:75:63:5b:a4:ea:a3:0d:
         df:a3:0e:2a:c1:bd:1c:82:65:12:a6:a0:08:46:19:fa:08:fe:
         d8:9b:fd:af:cc:f0:ea:39:fc:69:03:30:9b:08:21:bf:84:65:
         8b:b4:27:fc:0b:f1:e7:80:a2:17:9a:1b:96:ba:a6:06:bd:77:
         f2:4a:e1:d3:7b:07:d4:a9:40:85:af:38:2c:6f:47:a1:28:be:
         e1:20:d3:6f:5a:4d:3b:8b:50:c0:8b:f5:39:b9:86:90:1b:ad:
         cc:66:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:41:58 2026 by rpki-client