Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6321fdc2-cc93-3321-baf0-7bf546ec5351.roa
File:                     6321fdc2-cc93-3321-baf0-7bf546ec5351.roa (raw, json)
Hash identifier:          DdWM6FHh5AUiTtiOTqaIJybesmkUA3zoIHE0YoTzZZ8=
Subject key identifier:   B7:FB:58:78:80:7D:92:B2:44:AF:73:30:1E:E7:F6:03:27:29:55:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C27F5106651B2A34FC3CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6321fdc2-cc93-3321-baf0-7bf546ec5351.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     396586
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:7f:51:06:65:1b:2a:34:fc:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=6b50b1ed-50b1-4637-8d46-a7f1fcb439de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:21:49:4e:0d:2c:b6:7f:9e:a0:ff:ad:5b:
                    db:df:2c:40:8f:d0:7c:77:43:be:b6:76:f9:09:45:
                    e2:b1:1e:6d:df:2b:27:55:13:8b:2a:c7:29:f8:ee:
                    66:b0:85:c5:ac:9c:eb:ab:c6:65:0a:a5:76:aa:07:
                    96:3b:f8:13:3e:c5:df:27:73:bb:d9:96:11:f9:c8:
                    72:c0:1c:ff:0d:2f:37:cf:d4:bb:d6:31:e9:f1:bc:
                    49:10:ad:fe:e9:15:c1:95:ac:33:22:85:2c:74:20:
                    a9:93:e6:4b:f4:c7:3c:f6:f8:c7:bf:63:ca:53:2d:
                    95:cd:d7:a8:d3:4d:61:96:5b:ad:36:15:47:0a:0c:
                    b2:55:1d:4f:a2:fa:60:5f:d2:12:53:1d:73:a7:73:
                    31:4f:08:00:4a:11:18:43:af:97:e8:e9:79:54:e0:
                    82:03:b6:86:d7:a9:5b:03:45:fc:cc:97:f8:ec:42:
                    20:d0:58:4e:bf:2b:30:27:0e:ee:1d:97:21:08:24:
                    e3:e8:18:c5:6c:89:74:b6:dc:ba:69:90:58:f1:aa:
                    6b:21:7d:46:b8:04:2c:bb:cc:9d:a1:c9:dd:75:df:
                    8b:17:4f:3c:07:a8:23:11:5a:e3:6e:37:bd:53:12:
                    ab:28:9f:62:3b:0c:13:8d:51:99:cf:97:e8:7d:b5:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FB:58:78:80:7D:92:B2:44:AF:73:30:1E:E7:F6:03:27:29:55:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6321fdc2-cc93-3321-baf0-7bf546ec5351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:59:58:eb:20:6e:a4:98:d8:c1:92:e8:3d:ca:70:43:57:38:
         02:b7:5b:e4:97:86:d1:04:4e:30:61:b9:9a:6e:af:9c:89:81:
         10:64:26:21:c2:02:94:60:d9:a5:97:e6:f4:13:01:94:c3:62:
         f9:c9:66:93:a3:ee:a6:ce:65:5f:fe:01:bb:6c:63:34:be:cd:
         0c:ee:25:c1:23:ef:31:bb:66:7d:e7:51:5c:67:93:08:85:b2:
         a5:82:11:1f:de:37:4d:b8:56:38:73:2a:a7:a5:5d:e9:69:fe:
         43:6d:05:d7:fe:4e:01:95:08:fc:5e:c8:22:5a:71:f3:a0:af:
         6f:a0:55:5d:47:e5:a1:10:94:c1:89:32:15:5b:45:eb:c2:23:
         9c:05:6c:b6:b2:c5:bd:53:9a:a7:98:28:77:bd:91:38:eb:89:
         ac:e7:e8:3d:cc:c8:98:e0:a3:ab:64:fb:53:3f:d0:1e:64:76:
         ea:46:d4:88:75:82:ef:06:8d:31:57:1d:67:1d:e9:85:e5:59:
         65:c9:b3:02:87:b6:fa:a3:21:c9:a0:f0:cf:52:11:bd:ae:fd:
         7b:04:44:c2:aa:9c:a6:00:0d:0e:e2:82:ed:a0:d0:3e:0d:f7:
         8a:a8:81:dd:0f:a4:7f:90:6c:4c:bd:b2:2c:c7:9a:09:6f:a4:
         0f:9f:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:39:42 2026 by rpki-client