Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b7b0d9e-36d8-31ad-8e88-19104046e6dd.roa
File:                     9b7b0d9e-36d8-31ad-8e88-19104046e6dd.roa (raw, json)
Hash identifier:          rvgkluLwktNlNiv0bmINiiaRA/9dqcVSTrzeb5LDEFE=
Subject key identifier:   B8:91:A7:E1:D5:66:5C:D2:3B:F5:04:3C:21:27:83:88:5A:AE:D1:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974AC93EF60976A85585FE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b7b0d9e-36d8-31ad-8e88-19104046e6dd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396547
IP address blocks:        2001:503:83eb::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ac:93:ef:60:97:6a:85:58:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3ad0b032-0eba-44f6-83b7-1f80da8092ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:5b:39:06:75:46:92:60:c8:6d:bd:8a:d4:
                    03:b6:63:e0:71:c3:c5:a5:ac:36:ca:a7:5e:6f:2e:
                    74:96:99:7a:7e:bb:fe:ba:bd:de:50:8a:ce:29:21:
                    e2:92:88:cc:f2:85:35:34:b9:91:47:b1:36:41:b7:
                    5f:f1:95:a8:88:10:d2:a0:c5:e0:7a:3f:e7:ba:61:
                    77:45:8a:7b:15:c8:ce:9b:dd:d3:70:40:11:3c:eb:
                    5b:c0:80:6b:a3:1f:de:64:0e:d4:47:87:d2:d1:9f:
                    42:29:3b:a4:7a:34:81:06:1d:13:0d:28:50:30:d1:
                    51:6c:31:17:3d:54:74:58:a1:65:89:e9:33:94:21:
                    09:2b:a2:af:bd:5b:a5:c0:e9:d7:52:31:e4:28:a5:
                    85:53:fa:b1:8c:fa:c5:3e:77:51:ac:94:bd:6d:fc:
                    87:ad:ad:eb:63:51:36:6c:f9:08:b8:bf:ec:82:7d:
                    34:51:59:5a:f8:da:b9:8e:5a:d1:12:0d:16:c7:78:
                    1f:5c:98:58:ec:e1:7b:0b:71:a3:15:71:39:d9:cb:
                    0e:64:64:a1:b9:67:2e:86:a6:fe:4f:95:51:e5:de:
                    c0:1e:d5:51:a7:8a:50:ef:d2:27:49:01:0f:5e:46:
                    3f:27:79:96:34:bd:fe:03:41:54:c2:30:2f:dc:70:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:A7:E1:D5:66:5C:D2:3B:F5:04:3C:21:27:83:88:5A:AE:D1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b7b0d9e-36d8-31ad-8e88-19104046e6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:8b:c5:08:bc:bf:9f:55:96:61:7c:52:2e:5e:56:87:ee:
         42:74:d8:61:17:cd:04:da:2e:c4:a8:b0:e6:7c:a6:9a:52:d2:
         de:46:3c:a1:c3:f6:50:b5:fa:f8:dd:60:94:f8:10:f4:1d:d6:
         59:b3:c2:8c:4a:c4:8b:90:c9:3d:7f:24:31:c9:88:b2:46:3d:
         77:03:ca:98:73:eb:a7:e4:82:0a:28:e7:40:1d:5b:8d:f5:db:
         5a:9d:16:60:f6:99:fd:92:e9:fc:4f:cf:dd:e0:42:ba:7e:40:
         ff:62:6f:32:a5:40:b1:8c:52:89:8c:cb:73:19:94:fc:42:37:
         c3:6d:64:13:f5:78:64:6e:9e:40:c6:00:99:36:e8:bf:d6:81:
         a7:09:55:de:fe:ca:60:de:e1:9b:c6:27:c8:fb:c8:ba:93:58:
         a1:b2:b4:42:91:72:37:27:f6:6a:60:d9:1e:72:a5:1b:38:50:
         3e:79:40:bb:c8:66:d5:ce:b0:62:72:b8:e8:6a:ff:41:fb:61:
         d1:ea:78:77:c9:2d:22:23:8f:df:02:82:96:20:70:26:bf:58:
         16:43:e6:e7:99:95:a9:83:10:68:11:4a:af:36:60:0c:b2:12:
         16:ef:26:c2:13:e5:07:fe:bc:ec:d1:1c:ea:eb:18:c9:92:cf:
         07:a7:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:50:28 2026 by rpki-client