Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe9f01-e8cc-3dfd-b250-86df6f294e4e.roa
File:                     78fe9f01-e8cc-3dfd-b250-86df6f294e4e.roa (raw, json)
Hash identifier:          D9D4raZqjv5mybhZL8p8RYQ88l0tZaGyjbXzC5O/S0g=
Subject key identifier:   52:DF:78:49:6E:52:D6:8D:09:56:ED:C3:68:3F:03:98:F8:F6:2F:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727CA8288B30B4EB2D64F8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe9f01-e8cc-3dfd-b250-86df6f294e4e.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7c:a8:28:8b:30:b4:eb:2d:64:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=df10a71d-fdc7-437d-8138-f73c1b3f4870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:64:25:b3:ce:18:88:72:39:c5:bf:5c:b2:
                    0f:9e:bf:fa:e2:de:53:a0:33:45:c5:e8:7d:ee:a7:
                    47:7c:9b:6e:cb:09:4c:9c:83:ce:c0:bf:0e:3e:16:
                    02:b4:d5:ed:b9:4d:82:b6:e5:b2:18:8e:be:80:ab:
                    a6:3f:80:e3:56:24:4a:e2:7d:81:18:d8:1c:f2:a4:
                    68:43:da:cf:cc:87:5e:25:bc:9b:69:3c:7c:8b:58:
                    66:8b:03:a0:87:09:0f:dd:43:01:45:ee:6b:a7:a6:
                    26:53:eb:ac:25:c2:c5:f2:76:5a:7f:55:2e:bb:b7:
                    0f:ec:60:56:2e:78:c4:91:87:ab:b4:18:ef:bb:b1:
                    41:42:30:11:37:5e:a5:fc:54:76:0c:51:46:88:5f:
                    ae:9c:00:ab:22:e7:f6:74:c9:d2:5f:1e:c5:da:5f:
                    d5:5e:22:36:bf:7d:b1:fa:7d:4e:e6:f4:48:ab:f8:
                    63:ea:70:5a:b6:0c:ec:f1:d4:2e:54:55:bc:6f:d6:
                    b9:f2:7e:aa:10:3e:6b:21:1f:48:52:d5:cf:5a:0b:
                    92:fd:6b:28:6a:54:38:9d:de:7a:17:2e:84:3d:95:
                    3e:df:93:a0:b5:e1:ca:8f:2d:14:05:93:5c:17:ce:
                    18:14:d0:ba:cd:e9:77:7c:5e:74:80:1c:87:57:e5:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DF:78:49:6E:52:D6:8D:09:56:ED:C3:68:3F:03:98:F8:F6:2F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe9f01-e8cc-3dfd-b250-86df6f294e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:18:8f:cc:73:47:35:00:4d:ff:0c:32:45:29:4c:db:48:
         84:0c:e8:0e:78:91:a1:de:ef:8b:ca:5b:a2:da:b9:96:6e:19:
         95:1f:9b:9a:83:8a:03:69:69:57:f4:f5:fb:37:6c:c4:4e:1c:
         e1:c4:f2:9f:3f:52:10:50:0e:79:97:60:84:32:5b:4e:d4:bb:
         59:63:f8:ea:9e:91:3d:b3:5d:c6:7e:b2:38:d7:37:40:eb:f1:
         6b:9a:a2:6c:b4:b1:5b:99:13:88:b4:11:e9:8c:d6:c3:b2:9e:
         19:0e:15:22:6d:eb:51:ba:ed:b4:e9:aa:20:64:83:56:a5:7b:
         99:b4:98:21:fc:8e:e6:17:d7:0f:d2:50:ce:85:f3:b5:26:14:
         3d:cd:d7:fe:09:7b:8e:62:4d:4d:e3:b3:79:de:4d:74:eb:a0:
         b7:b2:cd:a3:44:6f:3c:3d:11:e2:40:7c:b1:6f:38:a9:f2:44:
         ae:a8:1d:5d:f9:88:f2:8e:0f:35:57:8c:0e:f0:c9:a4:93:25:
         31:1e:02:87:7c:72:91:f5:00:d9:43:a1:b8:68:5f:1f:cc:7e:
         7a:c6:20:88:80:20:aa:02:cb:56:d7:17:66:29:a8:c2:00:ff:
         30:70:71:fa:ed:f7:ca:58:9d:b8:a3:80:31:54:2a:9b:18:69:
         e1:64:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:05 2026 by rpki-client