Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfcb60c-97ce-3292-a1f4-367cb814b4af.roa
File:                     acfcb60c-97ce-3292-a1f4-367cb814b4af.roa (raw, json)
Hash identifier:          vnOIKR68pbdcc3ZwJkHktYqtPhOhw2HaIovPZ5ZEs8A=
Subject key identifier:   BD:F7:E5:E1:5F:FF:6D:A6:B9:9C:C7:F6:AC:6E:8B:08:46:7B:A5:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727C0D27FCDE03A517B600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfcb60c-97ce-3292-a1f4-367cb814b4af.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     211369
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7c:0d:27:fc:de:03:a5:17:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=691a4d4f-43d4-471b-b9a1-38c34db61940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:fb:d7:70:03:be:59:5e:d1:02:c2:48:e0:
                    28:c7:9f:d8:e6:e5:81:f8:94:09:50:30:20:c7:cb:
                    ca:8a:46:24:f9:db:de:b9:f9:d2:2c:60:b3:a9:93:
                    51:1d:fe:11:f0:32:24:1b:ca:0b:03:3d:4d:ce:4c:
                    d1:d3:e4:bf:c5:b1:ec:36:40:fc:3f:a4:b9:95:8f:
                    3b:6c:51:f3:3a:64:43:62:78:36:81:e4:34:85:e1:
                    51:3a:b7:37:2b:71:f1:d4:1c:1d:e0:13:51:e5:dd:
                    88:a9:0f:c0:11:d6:8d:88:17:b6:0f:f8:58:4b:20:
                    c9:dc:15:45:29:ba:41:8c:94:25:07:1b:a1:78:be:
                    c9:fc:4e:03:0a:49:0e:a1:75:ee:a9:10:80:86:68:
                    76:ff:a2:8b:c2:a1:86:df:28:e1:d1:d1:dc:aa:4d:
                    ec:08:f4:17:dd:4c:ce:fe:c0:7d:eb:c7:e7:f5:ac:
                    44:0d:af:01:7a:da:f5:40:9c:7b:5e:a6:0a:9f:7f:
                    12:26:7e:22:bd:cb:4c:2e:e5:ac:9a:35:7a:21:0f:
                    66:9d:d8:d4:31:3d:ee:02:cc:94:3a:f9:5b:fc:29:
                    3b:9a:ff:87:66:b0:64:67:51:fd:e0:a6:0d:59:dd:
                    6a:a1:77:1c:23:99:e9:57:48:ec:19:c8:2a:f6:a8:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F7:E5:E1:5F:FF:6D:A6:B9:9C:C7:F6:AC:6E:8B:08:46:7B:A5:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfcb60c-97ce-3292-a1f4-367cb814b4af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6a:b8:55:de:5f:18:b5:f9:2b:70:94:8b:d6:2c:1f:4e:ed:
         8f:ad:7e:26:5a:0f:44:fb:51:b0:b7:11:cd:cb:a3:9e:1e:9a:
         68:46:0d:4b:5f:27:22:78:a8:cf:19:78:c4:7a:20:d7:37:31:
         3a:36:85:56:36:67:e3:d2:d5:82:aa:b6:08:da:84:fa:7e:22:
         84:61:d5:80:8b:ff:23:04:17:d0:99:9f:46:fb:3d:45:bf:48:
         49:d3:74:c3:c6:af:9c:6e:d2:4a:7c:7f:fc:f2:a3:44:4a:36:
         f1:89:f5:4d:55:11:bc:8e:9a:03:99:f1:3f:11:74:d8:ab:73:
         8c:71:48:89:04:e5:a7:c5:f6:15:c5:c3:02:d8:bc:8d:76:18:
         c3:84:af:21:89:04:f1:4e:ee:97:4f:d2:c7:98:6b:c0:42:0e:
         4a:19:56:b5:ec:ce:ca:60:c2:b3:1c:78:57:0d:6f:7a:96:a6:
         86:68:c4:f3:01:83:ff:e8:47:59:2c:08:56:b4:b4:83:50:7a:
         39:27:8f:e1:8a:48:f4:00:94:20:8f:55:74:df:79:b1:86:c8:
         67:20:22:0d:be:63:3f:fd:83:16:8a:21:af:18:25:a3:5d:26:
         c6:6e:e6:a5:d5:d6:13:90:3f:ed:d8:f1:e6:73:4c:18:f6:74:
         1a:8e:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:34:15 2026 by rpki-client