Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
File:                     c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa (raw, json)
Hash identifier:          x15LY/i1DoXAHNigv07i+o4xBepoLdfPnaOzmW+2RYc=
Subject key identifier:   C0:69:95:58:1D:01:1B:1E:F9:C3:B5:40:C5:9D:AC:3D:0D:06:D4:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067273D6E0FE477EAA613600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36620
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:73:d6:e0:fe:47:7e:aa:61:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ff7be852-a455-4d72-b663-339892f22a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:a1:9a:b5:bd:73:95:e9:9e:11:f8:d3:37:
                    8f:f1:16:73:19:94:9a:71:cb:47:5d:80:76:01:2d:
                    f7:4a:63:73:ab:e4:b2:ef:e6:83:50:fe:a4:b6:64:
                    ba:4d:dc:ee:63:13:eb:27:50:23:92:8b:58:c0:65:
                    e8:39:02:30:29:b2:c6:82:30:44:7f:87:e1:ed:e2:
                    96:59:b2:43:2e:44:66:60:e1:4e:61:f2:57:f1:cb:
                    1a:c1:4d:a4:83:7b:56:3d:6b:e9:87:bb:7c:a1:fc:
                    c2:3b:34:d2:87:c2:f5:82:94:e1:56:54:05:47:91:
                    66:56:a2:a0:91:b2:bf:2c:6c:71:f5:77:10:c1:44:
                    65:2c:84:ed:8f:ee:8e:49:f6:32:79:ab:5d:54:9d:
                    dc:22:79:67:6f:5b:5d:35:4b:7e:75:0a:39:91:85:
                    35:29:02:3c:fb:ba:f8:06:be:dc:67:c8:7e:ba:2f:
                    e7:22:57:43:df:c8:24:e6:17:6a:df:00:f4:57:74:
                    e1:f8:c7:36:fc:48:13:bb:49:f9:7b:7b:c2:ee:e5:
                    6d:11:f4:7d:da:3c:5a:38:db:ea:54:e6:36:0e:4a:
                    a3:51:4c:5d:ca:9f:ca:9a:2d:67:9f:08:6f:b5:9a:
                    3a:b1:d4:6c:14:b1:90:97:34:ef:2a:52:eb:d1:3d:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:69:95:58:1D:01:1B:1E:F9:C3:B5:40:C5:9D:AC:3D:0D:06:D4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:1f:c6:2c:ba:4d:ec:d4:c2:47:2d:d2:72:f4:e6:57:03:
         35:d3:e2:62:5a:81:07:40:0f:5c:f3:08:fa:36:0b:9d:a5:98:
         9a:96:46:74:7f:47:d3:d5:1d:41:63:5d:c4:90:b5:e0:ac:fd:
         93:b6:9b:2c:81:37:86:d8:24:17:dc:19:1f:2b:3d:c0:aa:40:
         7f:08:0e:59:aa:02:4e:6e:12:e1:58:d3:08:42:7f:96:cd:b5:
         54:60:3b:3d:3f:df:b5:5d:26:e4:2b:32:2e:1a:0e:fd:74:7d:
         7d:55:bc:52:4a:11:ae:1f:64:70:3e:93:85:09:59:8f:db:bb:
         3d:4a:78:fe:04:b5:66:cd:bf:b5:45:20:8b:b8:f1:f8:f9:c4:
         88:b0:77:d6:70:9a:a6:e8:70:cc:54:5c:fe:9d:2f:3a:ae:cf:
         9e:0e:61:1a:92:85:63:a6:f9:0d:03:79:83:c4:43:51:8a:aa:
         2e:26:9b:d3:00:28:0f:bf:7f:03:97:e6:98:01:8f:a6:fb:65:
         14:2f:13:e7:d2:6b:85:29:16:f9:33:54:bd:94:1a:21:bf:93:
         cf:68:f2:16:7f:b9:be:c8:f3:0a:f5:5d:ba:e5:e1:3b:29:9f:
         5f:da:25:d8:ca:c4:99:a5:87:a6:ac:ff:1c:a7:d5:82:a6:8f:
         69:40:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:06:18 2026 by rpki-client