Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae48f25a-fa1c-3701-9231-ef645061979d.roa
File:                     ae48f25a-fa1c-3701-9231-ef645061979d.roa (raw, json)
Hash identifier:          QFrf3EAGy9JnLnQg15H1gjNEsKsMpCw4z5vg9b/s7kc=
Subject key identifier:   77:64:A7:0C:EF:C2:65:14:A7:FF:0F:1B:B1:C3:D9:EF:E5:C0:27:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA225326061BF22B8CDDF70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae48f25a-fa1c-3701-9231-ef645061979d.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     10515
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:25:32:60:61:bf:22:b8:cd:df:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=3227bc83-5c64-49f5-a51b-b6b0df039aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:93:60:5e:25:2d:96:0c:2f:54:19:75:84:
                    44:e4:4b:25:74:19:97:5e:80:6b:47:9b:7f:40:6d:
                    4d:8d:f2:aa:92:91:56:3e:4b:40:4c:91:c1:2e:f9:
                    91:ee:2e:08:28:6f:ea:5e:92:9a:2f:a4:67:82:d1:
                    04:e4:b9:43:83:8b:d8:4e:a4:4f:8b:0d:9a:25:8b:
                    ac:b8:e4:b2:fd:fb:88:44:0f:4a:10:53:61:a6:a8:
                    41:b2:39:0c:0d:0b:8a:e8:ea:64:68:49:3a:b5:fb:
                    df:8c:8f:72:85:48:3e:77:2a:f9:c9:b7:59:04:2e:
                    28:65:12:94:0a:06:37:1b:0c:91:b0:90:01:5d:da:
                    5d:02:0f:dc:02:71:e9:f0:f1:48:33:ef:59:d0:7c:
                    de:dc:0b:6f:fb:81:71:28:a4:e8:01:87:16:8d:e6:
                    31:57:14:80:4e:58:47:e6:e6:14:eb:e1:fd:03:d1:
                    d1:eb:e0:af:40:81:98:b6:20:68:ca:cf:10:8d:5c:
                    b3:b1:69:e0:42:c4:6a:76:46:f8:2b:39:e4:20:d7:
                    fb:ad:3a:da:13:d1:78:5f:6e:0a:83:43:5e:09:2a:
                    2f:0e:e0:da:fd:1e:21:49:26:7a:cd:4e:16:9d:7f:
                    2d:f3:70:d1:13:dd:3a:3e:04:01:dc:67:d9:1d:be:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:64:A7:0C:EF:C2:65:14:A7:FF:0F:1B:B1:C3:D9:EF:E5:C0:27:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae48f25a-fa1c-3701-9231-ef645061979d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e0:2b:b4:9b:4f:f0:22:0f:0b:2b:9b:de:1e:ec:29:79:05:
         7f:eb:7e:33:88:ae:3f:73:c6:ca:22:d3:91:77:3d:c8:9c:db:
         e7:a2:35:74:c4:d9:8c:0b:b4:f6:6c:1b:46:a5:74:6e:9a:85:
         da:63:32:2a:94:d1:9d:9b:f0:d2:6c:bd:ba:cd:7b:9d:65:e9:
         e0:2b:a5:ac:96:3a:0d:bb:cb:cd:73:38:35:cf:fb:56:33:46:
         03:8e:b1:3c:fe:6e:b5:c3:48:a7:82:6d:f4:0c:f6:fb:7c:b0:
         bf:7a:d8:6a:41:3b:5b:38:fc:2f:02:bd:b0:93:f1:ae:e4:af:
         36:dd:cb:6e:04:92:b1:0c:c5:ac:69:a9:40:42:2f:71:13:85:
         45:23:5e:d7:01:d6:32:5b:11:74:79:dd:4e:d2:91:50:d5:f1:
         24:7a:c2:e2:28:7d:7f:1c:38:e3:2a:24:bd:3b:bc:dc:4d:d9:
         a5:24:10:34:ff:03:5b:0e:c7:cc:7e:0b:9e:f3:35:08:2f:ed:
         cd:bb:a6:e3:49:03:ca:3b:1f:fe:3e:7f:79:7c:f7:1a:44:14:
         ba:cf:55:24:6d:6d:b2:dc:07:1c:54:41:bf:d5:f9:54:42:cf:
         eb:7a:aa:68:d0:5d:27:af:fe:24:2f:bd:39:ef:39:97:05:18:
         d6:06:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:43:58 2026 by rpki-client