Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/764eeaea-b1f0-36e5-b2c0-21c39f41d691.roa
File:                     764eeaea-b1f0-36e5-b2c0-21c39f41d691.roa (raw, json)
Hash identifier:          sCWjPMb/orYQvArp2qqb6ugb8D6n7XL/t7L6I2SikPc=
Subject key identifier:   44:62:1D:5E:7C:C5:53:51:38:F7:01:30:7F:75:21:E6:A8:1D:A3:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C27F5BDE16A381127B1320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/764eeaea-b1f0-36e5-b2c0-21c39f41d691.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     396581
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:7f:5b:de:16:a3:81:12:7b:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=895cf46a-737a-47dd-ad0a-1677ac1268c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:56:15:d5:57:f1:74:e1:1f:27:cd:f1:7f:
                    09:f6:97:25:c7:82:9b:11:8a:c7:31:ff:1e:d2:10:
                    5d:1e:79:95:5b:28:a7:0f:f4:9e:98:d5:01:7f:b6:
                    91:23:88:01:52:e2:f6:9b:40:79:62:91:e7:0f:17:
                    bc:bf:9f:46:f5:1f:4f:5b:42:da:99:b9:62:df:ae:
                    08:23:0c:23:cb:52:d3:0a:62:e2:e5:b8:37:08:f1:
                    24:f9:bd:9f:4f:8a:2f:82:06:2a:b3:1d:a7:c1:61:
                    0a:24:fe:bd:bf:51:91:f5:c3:fa:5c:7a:d5:f3:41:
                    c4:dc:ab:52:6b:59:61:73:35:b7:d7:b0:20:23:5c:
                    c5:9c:a6:04:0a:2e:67:3f:d7:a5:53:9b:3a:af:23:
                    68:14:4e:ba:d2:74:51:45:b2:0d:6a:c7:ca:aa:6b:
                    fc:1e:75:62:c1:f5:01:77:9b:71:c9:5c:eb:c4:bb:
                    bc:3b:12:42:a4:91:55:5e:50:2b:e4:27:f1:07:50:
                    76:67:85:2f:07:85:cd:d1:61:e8:59:df:06:51:8b:
                    a6:03:63:32:fe:60:39:dc:6b:d5:3b:13:a6:d2:f0:
                    0a:ce:87:b4:53:f2:56:71:93:12:ad:b1:06:7b:29:
                    f8:dc:99:0f:4c:bd:d1:62:22:07:77:c1:81:03:0e:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:62:1D:5E:7C:C5:53:51:38:F7:01:30:7F:75:21:E6:A8:1D:A3:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/764eeaea-b1f0-36e5-b2c0-21c39f41d691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:f3:72:27:74:c0:b4:2f:3e:c5:07:35:e6:0c:7b:05:5c:
         fd:32:9c:06:8b:c6:a5:94:70:cc:8c:2e:06:5b:f0:ec:4a:a6:
         8b:5b:e4:bb:e9:7a:d5:a8:34:e4:72:57:dd:78:5d:81:31:29:
         5e:b6:b2:ef:34:f3:95:0f:8f:55:9d:11:ff:cd:f5:14:69:7b:
         ac:5b:62:a2:e6:3e:f1:4b:11:0d:dd:25:24:98:c6:0a:7c:63:
         50:20:f1:3d:6f:c4:76:42:40:c7:75:82:20:73:65:1b:47:51:
         fa:c9:7e:c4:d1:94:4a:64:4a:e5:0a:d4:37:aa:2d:21:e1:27:
         3f:70:e1:47:75:39:e8:c3:24:c6:93:f9:35:24:e7:d5:f4:9e:
         c8:8a:15:51:72:8a:49:aa:ff:fc:9a:b5:f7:a1:ba:e7:1a:34:
         01:55:d9:4d:31:85:ee:50:8f:8a:a2:38:59:c7:c4:63:ed:df:
         24:1a:14:24:86:c5:cb:ba:1a:80:a6:8b:45:ef:ae:a5:82:51:
         10:d0:71:08:33:c2:ce:33:26:39:05:b0:7e:08:9e:51:17:f6:
         39:34:3c:75:a8:9a:5a:1a:8f:95:a8:2f:cd:a3:d0:b9:69:fe:
         b9:6e:f1:de:8c:23:db:af:8a:1b:cd:16:87:6b:48:0a:d6:cd:
         83:ef:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:18:36 2026 by rpki-client