Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dea7814-88ce-3cc8-9861-218f9c0dbc8d.roa
File:                     9dea7814-88ce-3cc8-9861-218f9c0dbc8d.roa (raw, json)
Hash identifier:          KcsAB/Pwp9SXqHOf4+jl9OfDoSLsAILAjPlSWwoY/sU=
Subject key identifier:   62:C4:C3:37:AF:C1:0A:78:CD:58:C7:3B:2C:45:8A:D3:64:9D:FC:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CD20D5094FC070186E800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dea7814-88ce-3cc8-9861-218f9c0dbc8d.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396566
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d2:0d:50:94:fc:07:01:86:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=4fe13be9-072f-4b25-93f6-f09f0278db3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:59:aa:db:dd:d2:71:cc:45:c7:3d:0a:b8:
                    bc:94:1c:d0:1f:dd:0d:c3:05:f0:c6:63:d9:e0:20:
                    cc:93:f9:52:4e:71:cf:39:75:0e:62:8e:f7:ab:1f:
                    08:68:f1:9a:be:1c:71:55:72:c4:cf:ec:f8:3d:1c:
                    86:c3:5f:95:95:de:9c:13:9e:01:19:43:a2:18:39:
                    42:5d:8b:d9:74:5f:12:01:6c:83:96:7d:03:a5:a8:
                    58:90:87:aa:f6:40:b6:5d:3a:f8:95:53:3c:2b:be:
                    a2:68:7c:8a:1d:9b:f8:d0:6c:a2:76:c1:d7:29:3b:
                    2d:2f:54:a6:61:81:d2:a9:6f:2b:cb:ab:41:f3:22:
                    9c:0f:01:92:f0:3a:1d:38:f9:83:8a:3d:71:71:3a:
                    89:8c:c0:d3:7a:76:02:5b:a4:61:e1:35:4e:46:69:
                    c8:6d:f3:85:7d:24:fa:9b:f0:a5:45:08:bb:8f:f2:
                    c8:36:1a:57:a7:88:80:d0:33:5d:5a:b7:f1:0e:79:
                    25:53:73:99:de:d6:e5:19:6d:23:ad:dd:ed:04:97:
                    25:97:c2:12:e0:4e:ae:da:81:e0:91:6a:1b:4b:fb:
                    78:bf:ec:f9:4c:9b:90:10:55:e7:c8:77:b8:4c:46:
                    cd:48:94:cc:f5:30:ce:55:67:c6:ee:b6:13:11:de:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:C3:37:AF:C1:0A:78:CD:58:C7:3B:2C:45:8A:D3:64:9D:FC:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dea7814-88ce-3cc8-9861-218f9c0dbc8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:68:7f:5f:ee:63:dd:4f:02:5f:e2:d6:f6:dc:19:f5:21:bc:
         76:eb:fc:b4:97:cc:35:6a:ac:21:81:76:74:f0:05:0a:8a:e3:
         80:70:7b:88:a3:74:53:8d:02:58:8d:ca:5f:ba:4c:41:3f:fd:
         46:26:fb:45:b7:a9:ac:0b:7b:3d:ec:91:d6:f6:e7:4d:ba:b9:
         e3:14:48:0b:ff:69:e3:4b:dc:59:b3:af:82:c6:f6:c0:af:26:
         30:13:65:71:98:bb:c2:26:e2:14:9a:6c:d5:52:a5:44:d5:36:
         9d:97:cb:60:c5:f7:ac:5c:74:56:b1:e3:99:99:2e:3e:4a:aa:
         58:db:1e:97:46:76:35:ac:93:50:71:8b:01:33:97:29:dc:a8:
         1e:96:80:f0:a9:2a:29:1d:2e:8c:98:9c:9a:10:d9:77:6f:5a:
         17:c9:00:6f:5b:d4:46:09:13:3b:e3:82:b0:67:fb:ac:6b:3d:
         0e:26:e1:63:0f:5c:d7:38:18:d8:0f:61:c6:2e:48:e9:19:af:
         e7:d8:bf:10:a0:78:d4:24:f6:dd:ef:74:19:6e:48:54:ad:b5:
         3f:65:31:ce:02:05:86:b6:3a:9e:3c:24:cb:68:0c:f7:c5:fb:
         f7:45:5c:d9:35:20:6c:1e:27:c5:cf:b2:8e:26:7e:b6:66:e0:
         80:30:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:29:30 2026 by rpki-client