Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5f2dbc8-e355-32b8-b652-ed5d9038582f.roa
File:                     a5f2dbc8-e355-32b8-b652-ed5d9038582f.roa (raw, json)
Hash identifier:          EPuwf86VW4pxM/FWYeOrFy1Zr0pRHQHxueAvHobqq1U=
Subject key identifier:   52:44:51:C7:08:06:2B:7C:45:98:D8:8E:C8:99:FB:92:0F:FE:18:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CACD5DDADCA2C4D859EE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5f2dbc8-e355-32b8-b652-ed5d9038582f.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     36629
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ac:d5:dd:ad:ca:2c:4d:85:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=429320f4-1695-48e1-a2c3-4d28f6bcf96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:0a:d2:0d:6a:7a:61:e6:77:e5:a2:37:3f:
                    8a:c2:ec:64:06:6f:e3:29:ae:a9:12:ce:56:5c:8d:
                    56:38:30:99:52:41:69:75:f0:d4:62:33:9c:73:e1:
                    99:ef:e6:09:9f:22:b8:fe:ee:a4:90:47:11:fd:2b:
                    42:fb:7e:fd:02:63:b9:6e:f9:f1:19:ba:01:94:01:
                    58:09:31:9f:78:af:d7:07:5f:6c:fb:cc:3e:33:8d:
                    0b:01:f2:ed:c9:12:e0:0e:c3:47:b0:3c:fd:1c:15:
                    2f:96:b5:a8:06:6a:f0:d9:a4:e1:dc:c3:5c:32:3e:
                    64:6f:d8:a6:31:a2:7b:5c:08:f4:dc:72:22:03:55:
                    20:66:c2:61:7b:8b:11:05:e8:09:c9:ca:fd:28:63:
                    05:07:a5:fe:15:27:5b:b1:02:4e:55:3f:df:e5:6e:
                    ae:29:12:a4:63:d9:05:be:f4:03:4c:7e:f8:e7:aa:
                    1c:a8:64:37:95:65:de:9a:54:74:70:5e:27:c6:99:
                    b0:a4:a4:7d:e3:88:f5:74:a6:66:0f:e9:aa:82:75:
                    d8:8a:68:7c:c0:8f:2d:e6:0e:7b:7f:7b:aa:c2:96:
                    38:d2:de:7f:de:81:3b:a7:9c:2b:c5:4d:30:57:7b:
                    3c:ed:96:b8:a1:2c:40:2a:4f:fc:ef:d2:31:dd:7c:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:44:51:C7:08:06:2B:7C:45:98:D8:8E:C8:99:FB:92:0F:FE:18:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5f2dbc8-e355-32b8-b652-ed5d9038582f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:0d:46:22:4f:c7:fc:d5:66:01:fb:66:2e:57:42:cb:03:
         11:96:5c:1b:dc:31:65:19:2b:49:8e:4c:7a:45:68:9f:2c:af:
         3e:84:12:27:85:c5:51:f9:15:55:88:bf:d4:13:cf:b1:62:ff:
         f7:af:48:a2:fc:8a:03:23:32:52:41:f6:76:05:14:52:fa:df:
         e3:ff:4e:a4:bf:52:23:e9:6e:00:a0:6a:58:9b:a4:54:ff:c8:
         8d:6c:75:4a:0f:09:61:b8:5c:e1:c4:c0:a5:c0:f3:06:0b:d6:
         64:88:8b:0f:c4:5b:fa:82:65:07:85:dc:ee:0e:93:ab:9b:8e:
         d1:8c:81:26:fc:6b:8f:1d:58:cb:81:9c:80:dc:0f:83:cf:f8:
         28:20:33:d2:f1:d4:39:d5:f7:2c:b4:f1:b0:a1:17:45:60:e7:
         d0:e9:14:0b:3a:f6:4c:d5:c6:1a:ce:18:f6:cc:c7:17:df:09:
         d5:5e:1b:c1:22:43:de:68:cf:94:79:ae:d1:9c:63:0f:28:f0:
         2b:27:e6:86:cd:5f:89:13:16:1b:92:b5:b5:eb:c9:9a:fb:59:
         d5:e2:33:5a:50:5c:2c:20:11:f8:43:ee:50:29:0e:7b:29:b9:
         07:fe:de:08:e0:0c:88:8a:90:f1:53:98:30:14:c2:b6:e7:d7:
         8c:cc:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:57:04 2026 by rpki-client