Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a022bbc9-4941-310a-96e4-1f71d3518d2e.roa
File:                     a022bbc9-4941-310a-96e4-1f71d3518d2e.roa (raw, json)
Hash identifier:          wO1N4gB1AbkY3QUYta7oFLgmnml+aERfqkEHb6RFHes=
Subject key identifier:   19:C5:2C:EA:38:48:63:05:11:A6:40:0B:9D:F9:CC:06:2A:8A:E2:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C28266E7BE6F33EBBF5200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a022bbc9-4941-310a-96e4-1f71d3518d2e.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     20431
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:82:66:e7:be:6f:33:eb:bf:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=e2717d26-2647-4eed-bb95-90206a7d7a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:fd:ac:4d:f5:54:67:8a:4b:47:51:6e:b6:
                    66:e8:74:1e:ec:fb:4f:7a:f4:72:c2:d5:db:a3:99:
                    df:9a:49:f0:7b:32:83:87:11:47:2c:f1:11:00:f0:
                    1c:dd:fc:b0:13:38:51:48:9f:de:89:c0:f6:d6:d0:
                    18:50:c0:78:5b:59:f0:65:5d:c3:6d:6c:b6:ad:76:
                    0e:30:37:4f:99:95:24:f9:87:0b:c5:39:3f:f0:37:
                    ac:31:4b:34:2c:88:04:1f:70:2c:25:e9:db:71:c6:
                    40:8c:0a:79:b4:fd:78:9a:a6:2b:60:af:3c:23:7c:
                    72:3b:84:cd:c9:2c:33:e5:fb:75:b4:ac:47:42:52:
                    78:bb:cf:75:0d:2d:9e:c5:de:19:08:74:8c:0b:8c:
                    1c:0c:99:9b:65:45:8d:b5:ba:17:b2:36:c7:59:dd:
                    74:69:5e:14:1c:bf:86:37:cd:ed:da:f4:40:6e:0d:
                    ca:78:b5:47:00:79:9a:53:4c:48:f1:5c:72:cc:a9:
                    56:74:82:12:f9:2a:74:ad:c5:26:59:b0:fb:bb:72:
                    97:08:fd:85:6d:63:f0:6a:b8:81:06:ad:76:59:3c:
                    57:3d:4f:66:80:01:d5:98:bb:31:9e:b1:d0:eb:73:
                    85:c7:85:cb:74:7f:fb:5e:7c:83:7b:c4:73:78:2f:
                    c2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C5:2C:EA:38:48:63:05:11:A6:40:0B:9D:F9:CC:06:2A:8A:E2:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a022bbc9-4941-310a-96e4-1f71d3518d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:14:50:37:6a:cc:90:b4:ad:5a:ad:42:0e:b5:46:39:37:de:
         6e:59:2b:eb:ec:1a:7e:03:14:b5:b7:26:b4:81:ff:3b:f0:f3:
         fb:1a:17:0a:4d:3c:97:90:bc:35:70:8b:23:09:02:38:2d:99:
         68:e4:2a:6a:db:55:6e:e9:60:ff:62:c1:0c:0b:82:dd:7e:d4:
         b7:93:34:60:f5:f1:6b:da:71:d4:10:e1:94:35:8d:e2:62:79:
         1b:43:32:6e:e3:c5:6e:4e:af:95:4f:4e:72:9f:c1:30:55:4b:
         8f:24:1f:3c:9f:19:6b:c9:07:36:d7:ff:3f:78:c7:9a:10:64:
         b9:48:64:5b:6e:a6:e9:7f:2a:b1:a0:3c:d4:f0:8e:07:74:2e:
         a7:64:b0:0c:ce:b2:4e:0c:ea:e3:eb:af:c3:02:b6:e2:e0:d1:
         06:94:a8:89:c0:dc:d6:5d:23:d8:90:52:da:9d:ce:14:0c:9a:
         d2:f5:b3:f0:34:50:29:8a:fa:cf:f1:dd:8b:de:96:c1:94:75:
         ca:99:63:8a:4f:f4:a4:95:18:83:ba:80:e4:37:c7:77:6c:11:
         24:fc:5e:fa:95:cf:08:ca:7c:32:5c:ac:8f:98:db:60:37:52:
         ff:15:1d:cb:85:73:aa:f8:41:e3:82:21:16:8a:5f:aa:e3:0e:
         9b:c5:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:13:12 2026 by rpki-client