Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fcbd332-e41d-3394-b4a5-698855f2e301.roa
File:                     7fcbd332-e41d-3394-b4a5-698855f2e301.roa (raw, json)
Hash identifier:          fa2BIMEKgLmCY+olx6eVI11/kAN9d9cfNmR5z3AD380=
Subject key identifier:   7A:AF:22:8F:B7:87:B9:78:44:15:63:49:C5:F4:16:DC:D8:6E:2E:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EFCACE46F7EB89107B5F0B380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fcbd332-e41d-3394-b4a5-698855f2e301.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     25485
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:e4:6f:7e:b8:91:07:b5:f0:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=64ab3c64-d789-4cfa-962b-f0c6496141a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:f0:cb:cd:d1:1c:1e:02:eb:99:24:ad:86:
                    4b:6d:0f:97:99:cd:92:3f:9b:66:5f:f7:31:3d:9b:
                    cd:2b:4e:7e:e7:34:cc:14:3f:7a:61:ef:09:35:10:
                    32:d9:f9:ba:51:a1:4e:6a:3d:bb:08:ff:1d:6a:5c:
                    9c:89:42:1c:6d:ce:3a:5d:09:b7:67:a2:e5:14:ee:
                    d6:51:ae:c5:c0:aa:a7:c6:51:ae:56:25:0b:43:39:
                    4b:f6:0b:70:5a:80:d8:02:f8:08:37:81:b7:b9:ab:
                    2d:87:2c:a8:f5:4f:6b:79:33:53:9f:71:ef:6c:fe:
                    84:32:49:00:44:23:6b:60:a3:23:93:56:f4:36:a1:
                    b7:b1:a0:60:43:a5:91:74:14:25:94:66:0c:3d:84:
                    bc:a3:be:50:53:48:81:b3:71:fa:91:a6:a3:66:a4:
                    1f:7d:9e:c1:54:e4:f0:fc:a9:93:b7:97:15:92:83:
                    05:2e:2a:36:a2:a5:48:1c:bd:69:1e:48:1c:7e:4e:
                    2e:0e:0c:ac:e9:c3:ab:c6:6f:95:63:e6:5a:d2:b3:
                    af:58:22:08:48:4f:46:37:2e:83:aa:ba:df:7e:5b:
                    58:e8:72:43:33:84:5b:6b:5e:39:91:9c:bd:67:2f:
                    8f:2d:2b:e8:f9:c4:53:ee:79:17:47:36:75:72:e2:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AF:22:8F:B7:87:B9:78:44:15:63:49:C5:F4:16:DC:D8:6E:2E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fcbd332-e41d-3394-b4a5-698855f2e301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1c:71:09:82:72:fa:25:78:b0:a6:c6:74:4a:49:e7:f9:10:
         e0:f7:34:e8:07:3c:84:fb:fb:44:84:e1:d1:9a:d6:a4:79:4c:
         3a:ac:74:bd:92:ff:e5:27:b1:b9:bc:44:a3:06:5a:33:90:3d:
         d5:d6:5f:84:57:37:6f:58:fc:40:6b:0b:3f:81:70:98:76:7d:
         b8:ad:8c:6a:67:fc:f7:54:4f:75:e7:fe:67:ba:85:a6:04:78:
         48:5e:9b:9d:49:76:d5:d4:78:9a:bf:97:88:62:7f:8a:49:3c:
         f8:dc:98:ab:a3:a3:1a:e4:b9:f3:c9:15:4c:94:46:f6:38:a5:
         1b:91:8d:ef:73:1e:06:af:26:ef:8d:69:c0:05:62:46:3c:f5:
         f5:8a:00:a9:04:12:ce:36:e1:65:fd:8a:9b:e2:6d:93:3f:de:
         50:90:62:e5:0e:19:e8:be:18:22:64:d4:38:a5:c3:ac:bd:b5:
         63:e4:d8:53:48:0b:22:9f:ad:2a:61:03:0f:21:51:a5:55:1b:
         1e:e1:87:bd:f6:2d:c7:96:da:92:0f:9c:b9:71:90:f6:f5:58:
         e1:d3:e7:1b:e1:3d:8c:f5:ef:29:29:8f:ef:4d:42:7a:ad:df:
         22:e9:4a:a7:b7:3b:68:1f:c7:b4:50:04:6b:86:cc:e1:35:b9:
         c1:43:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:21:27 2026 by rpki-client