Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa
File:                     ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa (raw, json)
Hash identifier:          YYKkwMavbFuZ6Wz28u+twQ6BRsOXnKkubyV7aazHIX0=
Subject key identifier:   AF:C8:07:4F:61:A6:70:25:6F:B9:7F:23:50:E8:CF:AF:5B:1C:19:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EFCACE2069E54587805C46580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     396603
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:e2:06:9e:54:58:78:05:c4:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=9965efb5-c56e-4ca4-bce3-0d4786fb1360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:e0:84:0a:0b:24:91:cb:ff:4a:55:f7:8f:
                    8c:69:d0:ee:dd:ff:f0:0f:82:bb:56:aa:94:4e:f7:
                    e5:16:62:8c:95:00:f2:42:c1:c1:0b:a6:33:62:94:
                    b0:47:d5:bb:d4:66:9d:f1:5e:ce:c4:22:82:c9:3f:
                    6e:c5:94:73:47:9c:b1:fb:cf:13:9d:23:2a:19:98:
                    a6:ea:f6:96:04:6f:86:38:3a:9f:0a:02:b8:d8:d8:
                    c6:55:81:27:f1:6a:a3:8f:70:8c:86:64:0a:db:cd:
                    86:b2:78:e6:15:51:b8:bd:85:9c:a9:5d:bd:82:27:
                    73:c4:c3:6d:57:0e:05:ac:5a:ab:a0:1e:8c:0a:bd:
                    cb:42:0e:35:8c:bb:84:e8:d1:17:72:cb:6f:b2:9b:
                    09:97:a1:94:5c:8c:69:36:0c:31:d1:d2:27:61:b5:
                    48:85:3e:fe:f9:4c:4b:a9:bc:88:26:e3:11:59:1b:
                    0b:71:5b:49:fe:2d:e1:e1:a8:3d:58:62:57:2c:35:
                    15:61:34:91:62:cc:b2:b2:60:31:db:c4:68:18:89:
                    d2:24:9f:c6:2d:41:d1:61:35:24:c7:4b:e7:56:2c:
                    68:53:1b:71:90:1e:ed:91:e7:c0:c8:cc:53:b5:43:
                    e9:e5:da:85:5e:fa:c9:34:40:26:15:70:c4:ca:52:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:07:4F:61:A6:70:25:6F:B9:7F:23:50:E8:CF:AF:5B:1C:19:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a6:9e:19:79:22:8d:fa:8e:45:78:bc:fa:d8:ee:20:b3:c6:
         a0:10:f3:28:1c:3c:ac:72:60:50:bd:fb:bd:71:3c:08:19:ed:
         16:c0:e7:72:66:b3:f7:5b:a8:79:28:e6:76:ce:1b:28:3a:3b:
         70:fc:94:72:6f:64:4a:c8:06:a3:d4:61:5d:b2:97:82:d1:44:
         f2:cc:5d:e4:75:b2:41:6f:0f:f4:53:5a:eb:1a:d2:7f:9e:f3:
         d9:38:5c:c1:34:58:c6:a2:04:05:f3:f8:21:3e:e9:f5:2f:49:
         26:e2:7f:e5:74:12:83:08:b1:06:18:5a:de:6c:6a:ab:dd:3e:
         40:a1:51:2e:a1:fe:22:df:1e:02:78:8d:3c:6f:50:b0:a3:2c:
         f0:5d:32:bc:26:fa:03:77:4a:b9:b0:4e:e3:90:e4:33:a5:eb:
         f5:95:77:e6:f4:49:a1:7d:d6:5b:ab:88:80:e6:b9:6f:d5:83:
         03:57:b6:68:4d:4d:ca:68:33:dc:b7:f1:3f:8f:5f:67:87:99:
         16:a0:1c:ea:d3:a7:ca:23:2f:e2:b6:c7:41:fe:e3:60:7a:f3:
         b0:ed:02:94:c1:c4:03:ee:5e:5c:23:d7:db:78:5f:c2:1e:7c:
         43:4f:6f:82:61:68:70:70:8f:2d:88:b1:e3:33:71:ca:00:b7:
         63:7f:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:56:40 2026 by rpki-client