Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b6acf1c-c0d9-38f1-a6f1-57eea543dcb5.roa
File:                     9b6acf1c-c0d9-38f1-a6f1-57eea543dcb5.roa (raw, json)
Hash identifier:          IOtSSOsYe2aHFtPkKx6j3XjwcqmXfzW4EwyP4+os+fU=
Subject key identifier:   E9:12:8D:06:39:D4:1F:58:94:69:B0:F9:F8:5D:77:3C:EB:C2:05:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067280A465BCC096260A22C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b6acf1c-c0d9-38f1-a6f1-57eea543dcb5.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396550
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:80:a4:65:bc:c0:96:26:0a:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=d9f94014-befb-4616-9c18-0642ffcc44ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b6:86:22:71:44:2c:10:42:d4:bd:84:7e:8b:
                    a2:e2:76:f9:cf:02:29:59:eb:a6:29:07:06:84:a0:
                    be:b8:db:d7:20:8d:df:dd:b1:ec:f9:d3:49:50:da:
                    12:68:62:72:27:94:1d:de:41:7d:53:45:92:c4:1a:
                    b8:d3:6d:ef:99:20:b0:65:2f:ea:aa:28:d9:94:15:
                    b0:f1:e0:4f:03:77:1a:cb:eb:d7:f3:b2:dc:c2:5c:
                    d5:fe:c3:77:21:40:19:32:c5:f9:86:d6:a6:5d:b9:
                    cf:b5:4c:c8:56:c5:39:65:ef:0e:16:68:a2:85:a4:
                    3d:08:53:ae:a8:cd:51:fe:c3:3c:cf:f8:50:79:34:
                    7b:ea:aa:20:ab:45:4f:ae:f4:46:26:51:ea:f0:af:
                    32:02:75:cb:8b:80:15:bc:32:a1:cd:cd:d1:69:da:
                    a4:85:e6:ee:10:45:74:07:11:d0:05:f3:56:78:c3:
                    72:88:b0:68:f6:2c:99:bc:bd:7a:6f:95:75:5b:ce:
                    47:27:bf:49:02:02:02:00:be:95:69:d8:c1:2b:83:
                    6d:37:9a:d0:b2:b2:ee:c6:79:da:fa:e7:3c:ba:ad:
                    55:9c:48:d6:e7:dd:92:69:87:a4:86:ef:c8:b4:03:
                    38:4c:f7:3a:8c:2f:f8:54:7d:6c:7e:e4:f1:51:0e:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:8D:06:39:D4:1F:58:94:69:B0:F9:F8:5D:77:3C:EB:C2:05:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b6acf1c-c0d9-38f1-a6f1-57eea543dcb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:1d:8e:55:2a:23:74:4f:94:21:0e:4c:18:d6:e1:9b:f4:92:
         58:6d:a2:61:94:1e:a9:fb:e7:39:63:9b:bf:ae:f5:26:61:6e:
         03:3d:1d:6b:8f:9f:09:d4:fd:f6:72:0b:90:5b:45:18:18:2a:
         ae:81:a3:50:5b:e7:61:2e:30:04:9d:2e:55:1a:b3:7f:8a:68:
         78:00:33:f5:a9:e1:30:af:0c:ae:ed:cb:81:7e:58:90:c6:3c:
         b8:30:27:b0:25:06:81:64:5a:9f:39:e5:b2:65:6e:00:c0:1c:
         70:de:a4:39:68:b9:24:84:e9:79:d3:88:bd:1a:17:15:8c:24:
         ea:a5:26:fe:b7:b4:42:5f:63:d6:08:98:db:02:7c:ba:44:95:
         99:ba:82:7f:b0:06:b1:20:07:51:01:51:8b:07:05:1e:af:52:
         76:f4:dc:ea:14:45:33:79:b0:2a:01:b5:72:e4:55:3b:ad:11:
         73:26:c1:eb:16:f7:e0:20:48:5e:cf:bf:25:e9:fb:4a:f7:d3:
         40:a0:70:47:97:6b:7c:19:4f:bd:4c:6b:d9:3c:a2:e4:20:a4:
         64:de:a2:b8:26:44:ef:c6:72:4e:59:5b:4e:21:58:31:af:3a:
         aa:79:12:4f:bf:0c:1a:5c:c4:48:6f:69:7d:55:92:a3:35:77:
         bc:33:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:59:10 2026 by rpki-client