Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88e800f4-3e88-37db-a53c-bb0b9543f567.roa
File:                     88e800f4-3e88-37db-a53c-bb0b9543f567.roa (raw, json)
Hash identifier:          eJdAQ/yTcJQCoYWjJ2wClMjjYif26ZGhIahBnJ1swF0=
Subject key identifier:   FF:B1:07:57:06:CD:77:0C:EC:F7:0A:DD:53:E6:03:D6:8C:9F:55:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727B108A85774E01DD9B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88e800f4-3e88-37db-a53c-bb0b9543f567.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396611
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7b:10:8a:85:77:4e:01:dd:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b67ad142-b745-4426-9436-777100a2cc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:bc:ed:0a:f6:76:fb:39:b3:10:d0:9e:5a:
                    14:c7:60:c8:6b:85:a8:fd:be:24:99:51:bf:3f:71:
                    0d:6f:4f:38:c4:95:e9:c0:6d:55:f2:19:c1:97:00:
                    04:79:65:e1:5a:20:d5:26:ee:ef:2b:d4:d0:91:bd:
                    f9:5f:dd:bf:28:fa:74:9a:4e:cf:df:cc:56:d7:dd:
                    ab:87:7c:d6:a1:df:7c:05:eb:72:00:17:fc:00:15:
                    18:31:22:cf:e6:d0:90:13:ea:85:96:e3:d4:8c:39:
                    f9:fd:d9:bc:a7:41:12:0a:e6:cc:02:c7:a3:42:df:
                    3b:a5:d1:5b:c4:66:e2:7a:5d:d2:7f:a2:dd:bd:e6:
                    ba:de:84:97:1d:5d:5b:32:9e:08:14:00:d6:91:10:
                    ca:b5:b0:70:00:f9:6b:3a:ed:47:f9:6c:13:cc:ca:
                    91:4b:96:88:59:d6:6e:3d:0e:44:76:0c:16:d4:74:
                    17:e0:28:7f:ed:36:5e:0a:13:59:27:b9:61:84:77:
                    8a:99:e0:bb:d5:95:69:18:7e:44:fc:d6:07:73:41:
                    00:b0:71:86:3a:85:7f:01:6e:8d:08:78:02:f2:3a:
                    98:b7:f7:66:b2:ae:bd:69:ac:af:95:4a:89:76:ab:
                    55:7b:a9:4d:07:f9:76:75:8a:09:81:57:82:00:b3:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B1:07:57:06:CD:77:0C:EC:F7:0A:DD:53:E6:03:D6:8C:9F:55:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88e800f4-3e88-37db-a53c-bb0b9543f567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:71:08:0c:f0:a4:25:8b:14:86:08:25:76:12:1f:b7:2e:21:
         e0:74:fe:5b:68:f2:d3:d3:48:ad:54:e3:62:db:36:aa:56:b5:
         57:b3:6c:5f:dc:9a:84:2e:59:2c:b4:90:59:2c:0b:06:39:20:
         0b:a2:6d:b0:fc:55:91:9a:50:70:75:f2:e7:77:8e:37:33:96:
         95:2c:76:22:e8:d3:67:63:10:d7:1a:c0:2c:00:00:22:04:4c:
         9a:8d:ff:37:6d:5d:2d:cc:45:71:8d:68:90:0b:54:71:a8:97:
         33:bd:88:b6:55:0e:be:55:90:45:b2:e6:78:99:ec:a5:69:20:
         72:73:f1:58:18:e6:1e:32:55:e1:6e:23:5c:46:cf:55:3f:01:
         cb:57:55:10:c2:32:ac:ca:9b:aa:b6:00:7a:8c:3b:62:98:10:
         e4:77:41:a9:f3:36:bd:bf:46:01:1f:91:96:d4:32:f8:bb:10:
         0a:37:b5:a8:86:9f:00:74:08:f2:19:2e:5a:94:70:94:57:35:
         e7:3e:d3:c6:18:1a:c3:fe:7d:3d:79:91:cc:18:a1:d5:ae:a0:
         d3:a5:e9:57:a6:6c:4a:78:a7:fb:4c:a0:21:fe:c7:c1:63:6e:
         0c:2c:f0:70:b4:24:8f:96:dd:f0:d9:78:6f:0f:6d:57:29:c0:
         f5:8f:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:57:10 2026 by rpki-client