Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d38c597-ae5f-320b-bc45-2232c1ae3892.roa
File:                     9d38c597-ae5f-320b-bc45-2232c1ae3892.roa (raw, json)
Hash identifier:          FCm6hqt+6p7DyqK9ELbN88HEWi6p/GLDtLx5j5XEm6s=
Subject key identifier:   57:6F:7A:78:D4:41:3E:24:3C:2C:4C:76:B6:60:08:70:7C:D0:88:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49730904EFE639457AAE1400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d38c597-ae5f-320b-bc45-2232c1ae3892.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36616
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:09:04:ef:e6:39:45:7a:ae:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f9860884-45da-414f-8f84-0086076c374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:9f:9e:7c:97:b0:ce:8c:be:0c:0a:4f:76:
                    bf:5c:ca:72:9e:df:71:08:64:0e:14:8f:e3:90:e0:
                    da:f3:fd:3c:a9:fc:80:d3:a5:1e:ee:9c:c0:ad:a9:
                    af:a6:1b:a6:4f:71:86:2e:4d:64:b5:ba:0d:ee:00:
                    68:44:f3:98:34:29:32:d0:e6:d8:6a:c7:90:6c:d3:
                    0f:2b:48:24:28:52:8e:c0:51:43:c3:da:4a:d0:1e:
                    4e:b5:71:73:12:2a:4d:c5:95:ba:0c:ab:bc:18:1a:
                    ac:96:6f:ce:5f:59:19:50:ea:16:97:9e:24:d6:20:
                    50:8c:78:83:4c:7b:98:23:cc:27:3c:12:1c:1b:07:
                    71:3d:35:db:21:14:5c:98:ed:ce:0f:13:86:0b:05:
                    95:47:4e:53:c3:ec:20:5d:ca:11:68:81:83:94:ed:
                    f2:af:ba:84:ec:8e:e7:7c:9f:c7:86:4d:4c:00:cc:
                    d5:e3:3b:ad:47:81:bd:8f:c1:1d:e0:d1:71:15:af:
                    40:86:da:eb:26:13:3d:b8:f4:86:86:f1:8f:be:90:
                    fb:41:1f:70:0c:de:e9:25:2b:23:d3:76:33:9e:91:
                    85:a5:8b:36:a5:33:ea:9c:09:dc:6a:1f:94:8f:64:
                    92:f9:b1:be:58:5c:72:57:bd:52:b8:60:2f:94:0e:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6F:7A:78:D4:41:3E:24:3C:2C:4C:76:B6:60:08:70:7C:D0:88:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d38c597-ae5f-320b-bc45-2232c1ae3892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:99:bb:a7:35:df:98:79:05:12:11:c4:6d:92:07:d2:b1:d7:
         90:1d:ef:38:7a:b6:e7:4f:c5:9a:b7:10:3c:e5:a4:c7:f7:c7:
         ed:2e:ad:9f:98:f9:10:73:be:71:9c:63:b4:80:db:98:95:22:
         85:f1:b1:e9:6e:5e:4b:f1:0c:41:62:d0:e6:98:a6:6c:f8:44:
         18:5e:29:36:47:06:e2:99:cb:f0:13:32:cc:2d:5f:a7:87:98:
         f5:93:47:c6:9a:e9:87:19:b9:86:76:4a:29:1f:f3:55:fa:ce:
         0b:93:a9:aa:6d:d8:87:63:9e:3b:ab:ae:25:db:56:46:80:d4:
         bc:9f:39:54:b7:9e:58:71:a7:df:d3:23:02:ae:d5:d1:d5:c6:
         7b:a8:c2:72:52:e7:b1:97:38:7b:ca:af:d3:b9:77:a3:9a:48:
         de:e7:f8:1f:98:05:f8:a7:1c:a8:c2:85:37:10:db:7a:ba:bf:
         61:22:5d:91:6b:bc:47:25:bf:c6:94:d8:f7:5a:a3:1c:54:cf:
         55:3d:6f:2b:40:33:eb:74:1c:0f:02:93:70:13:49:c1:20:a6:
         cb:ef:94:b7:1e:a1:6c:2d:58:92:d3:e0:47:48:95:ff:5b:0f:
         43:77:a6:f8:63:5f:1a:e1:7a:63:58:d1:f9:25:5e:96:7b:29:
         da:51:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:54:32 2026 by rpki-client