Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6807e0de-608f-3579-b630-1bb53ec15cdc.roa
File:                     6807e0de-608f-3579-b630-1bb53ec15cdc.roa (raw, json)
Hash identifier:          e5vF3+m2gO3ilgaanYbWdgn3e+fBwyklYvIr9stqjiY=
Subject key identifier:   75:BB:6F:D0:B9:FB:EE:4A:56:4B:E3:8C:21:C3:A9:24:1C:C7:B6:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B214E0102A1982CC414B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6807e0de-608f-3579-b630-1bb53ec15cdc.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     396540
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:14:e0:10:2a:19:82:cc:41:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=909b0d81-5698-4d41-bb58-73be3e44237d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:2d:e6:a0:89:e3:ee:5e:74:62:3c:c9:a0:
                    31:1c:c5:e0:fc:fd:82:04:f9:27:3f:d3:b1:54:e9:
                    a7:f1:e3:3e:4f:54:63:5d:e0:f8:ad:6d:5a:37:b7:
                    ae:3f:d9:83:5a:a2:5c:af:34:f8:96:46:56:3d:2b:
                    0e:bf:2e:a9:7d:94:a6:e0:25:e8:22:0a:b3:97:86:
                    9a:eb:2d:f5:5b:ec:76:87:47:76:6f:d0:57:a9:fb:
                    87:4c:7c:a5:db:d1:ad:e3:74:6a:0b:3a:4d:76:5d:
                    d6:dc:cd:3f:b3:6e:17:4e:ae:4c:28:22:36:07:9d:
                    94:fb:a7:22:24:ee:f9:c1:89:e4:76:cd:30:6b:0c:
                    90:e9:17:64:6a:87:ec:b7:0c:48:42:0f:0c:af:23:
                    98:b3:a7:bc:db:40:22:6d:4f:63:c2:db:2d:c5:7d:
                    38:5f:83:0e:79:a7:ea:58:c2:ec:9e:0e:2e:25:3a:
                    2e:6e:b4:21:f3:a2:ad:e9:7b:9e:42:de:e9:a2:99:
                    8a:d3:12:c4:33:4c:e1:1a:41:e0:36:08:91:4f:40:
                    ab:d0:66:d5:aa:7a:e3:3e:43:2f:41:ab:1b:d0:9b:
                    ec:65:64:e3:08:0f:18:25:60:2e:f9:25:a2:d6:c8:
                    3b:15:f0:e2:b9:d5:7b:f3:26:d8:78:79:58:47:35:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:6F:D0:B9:FB:EE:4A:56:4B:E3:8C:21:C3:A9:24:1C:C7:B6:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6807e0de-608f-3579-b630-1bb53ec15cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:eb:0a:a3:cf:4c:8a:c2:3e:a1:80:f4:45:92:f0:96:df:c9:
         d0:f4:02:9c:89:c9:6a:33:81:f0:0e:9f:fd:82:39:2a:d4:5b:
         0c:6a:19:71:e8:d8:3e:ce:db:0f:5a:f6:32:67:46:f2:c2:8b:
         36:02:37:4d:cf:3a:b7:68:89:83:5b:93:8e:7b:27:20:52:4a:
         96:57:e8:0f:5c:d7:01:ea:be:70:d2:e2:24:48:0b:20:1b:37:
         01:4a:82:e3:62:db:41:e1:b3:03:fc:f0:be:b2:a3:ab:52:79:
         8b:f1:42:b5:71:38:61:0d:1b:d9:6a:8b:fd:a2:57:a0:65:1e:
         c5:49:67:c2:1e:65:d8:70:e9:c8:ae:93:71:d8:cb:92:57:cb:
         e6:30:fd:e7:3b:1f:a8:06:74:a3:03:74:da:a2:a8:2b:5c:22:
         62:43:01:ca:95:4d:74:dd:51:d0:8f:ac:fd:d6:a8:8c:2e:61:
         2f:f0:b3:04:06:85:dc:2e:62:3b:b2:35:0d:05:d9:3f:b7:a6:
         6f:af:0c:c1:02:0b:df:dc:67:9c:2b:42:dc:43:79:55:ff:d1:
         50:eb:52:d6:92:d7:69:9e:60:6b:5f:5c:8c:ef:58:c6:82:6e:
         a5:b8:04:da:12:7c:30:71:6b:f6:e3:68:dc:50:26:88:78:33:
         2b:75:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:13:44 2026 by rpki-client