Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5497233d-9d13-3c19-a03b-df6c77891311.roa
File:                     5497233d-9d13-3c19-a03b-df6c77891311.roa (raw, json)
Hash identifier:          1Z6f7zvyZiROriRqGb7LjhGh1bhEpHZvnbzGrGgc4+g=
Subject key identifier:   EC:C1:74:9B:0C:E5:CB:15:B7:77:74:3B:22:66:50:A8:6A:13:66:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7B8A899BEE383B92A5180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5497233d-9d13-3c19-a03b-df6c77891311.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396553
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b8:a8:99:be:e3:83:b9:2a:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=75cc1fbc-50dc-4057-bc0f-8e83cff4e352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:da:df:a8:06:2a:da:7d:13:f2:89:1c:77:
                    1a:93:d8:97:16:70:05:a7:ab:59:58:f0:30:74:94:
                    dd:e4:f1:40:1a:12:5d:26:0f:eb:8f:c1:5c:8d:d9:
                    86:9e:76:4b:be:8d:55:38:6d:76:7b:40:b2:41:63:
                    35:40:77:d5:26:8d:a0:13:1f:4b:cb:89:5e:d0:0e:
                    b9:73:b6:b4:ba:28:c8:5c:f0:76:1a:5e:66:6d:a7:
                    2d:98:f2:d6:80:59:7e:33:1b:73:1a:31:2c:7f:84:
                    df:2e:c1:f2:2d:7a:ff:c3:4e:a6:58:3c:0d:8b:fa:
                    49:db:b5:db:ca:5b:08:58:8c:7e:07:32:b2:7f:b1:
                    33:52:72:04:fb:34:f4:ad:f2:68:7e:26:19:75:20:
                    f2:59:8a:3f:dd:9e:52:a5:fd:46:b1:3e:ab:05:2c:
                    56:d0:66:1d:7e:10:2f:20:4a:fa:76:60:bf:09:20:
                    cb:0b:e7:da:d0:d4:37:bb:d3:24:56:46:cf:5f:f3:
                    14:44:a8:9f:b8:a5:3f:5e:47:47:64:b6:e1:69:72:
                    e5:f0:9b:e6:6f:48:65:84:85:a5:9f:4a:40:7a:d1:
                    8d:4e:9a:2e:9a:a5:98:7c:ed:a7:a8:c5:d4:de:a0:
                    f7:7b:99:f5:a0:fd:55:66:9d:14:fb:8d:0d:15:77:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:74:9B:0C:E5:CB:15:B7:77:74:3B:22:66:50:A8:6A:13:66:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5497233d-9d13-3c19-a03b-df6c77891311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:f6:fc:08:db:18:d8:31:38:c8:21:d9:5b:92:60:f4:66:
         ea:e1:5d:4c:ec:8b:19:a4:02:4b:9c:07:1a:0d:a6:95:0b:d7:
         a5:03:5a:3e:f6:0f:ca:24:36:23:bc:48:0c:ed:ed:7d:10:0f:
         65:dd:a1:72:60:5c:63:5c:46:6b:f1:69:05:c5:8f:86:1f:1a:
         1d:56:a1:6f:34:27:98:35:23:37:67:59:98:d9:04:b1:4c:9f:
         0c:5c:bf:a7:82:5b:7b:78:58:a1:10:b0:c2:89:55:47:2b:14:
         11:d1:d1:95:a9:6b:92:4b:03:11:09:68:18:5d:8f:35:9b:6d:
         2f:ac:f6:5d:5d:4e:51:09:51:4e:0d:20:e2:0d:db:16:cc:98:
         b9:07:01:8c:56:63:52:da:ee:12:53:19:aa:89:61:e8:db:12:
         ec:4d:e5:4e:b4:a7:b9:69:d8:3b:56:88:46:73:d9:59:cf:fe:
         e4:39:8d:6f:87:cc:4c:81:2a:a0:2f:6d:df:69:ba:48:e0:bb:
         1e:40:40:40:4e:62:36:94:34:f9:73:af:76:5f:4e:42:c7:35:
         11:6b:84:f5:82:ba:1c:99:ef:ad:e1:52:53:d1:50:a9:c2:cc:
         6f:00:ed:e3:ee:cb:38:f9:a7:2b:01:de:65:1f:29:60:55:75:
         0c:c7:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:19:44 2026 by rpki-client