Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa
File:                     c3bf3d4e-8b15-31ab-953b-979086f42c13.roa (raw, json)
Hash identifier:          pJVu7fTWFksXpwOvACbgpwELDMR2cLoZfOiGOq4KgdQ=
Subject key identifier:   73:43:3B:7B:4B:D5:9F:03:D8:44:59:9D:9C:FB:88:6F:52:1A:00:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C280694D5397773E622480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     36625
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:80:69:4d:53:97:77:3e:62:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=d3f29ac9-9008-496a-9f68-74f70f344d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:55:11:86:72:a1:7f:6a:67:0a:67:89:79:
                    ad:3c:a4:92:97:d0:13:81:55:b4:08:85:e1:8d:92:
                    2c:6a:2f:04:f9:ce:52:69:91:11:36:c5:5f:f0:56:
                    1e:2e:3b:e7:44:df:59:48:b0:20:0c:f2:b7:ee:f0:
                    39:f8:da:77:be:a2:10:55:7d:38:a1:c8:79:0a:ce:
                    e2:22:86:9a:69:96:c7:6b:53:8c:39:8a:f2:72:5b:
                    bb:8d:3b:95:73:1c:65:ab:78:56:05:df:bc:12:ad:
                    a8:d1:1b:e0:06:7c:8d:2c:37:8f:9c:c1:b9:7a:a3:
                    de:79:b5:93:b0:85:aa:6f:c6:5f:ac:18:f6:ef:5f:
                    a7:29:dc:d5:34:fe:8b:11:49:29:2b:ba:79:fe:39:
                    bb:c5:5a:2c:87:ec:b0:1f:41:fc:cf:95:63:55:cb:
                    66:4a:78:f0:7a:da:82:f8:71:f6:68:02:f2:2e:4f:
                    bf:f5:d5:51:65:b9:f3:da:e6:13:37:2e:92:ec:6e:
                    49:fb:a2:51:27:a2:65:1c:67:8a:cf:71:57:eb:33:
                    0b:e5:57:03:8d:57:99:30:ac:f6:54:ed:fc:1d:a4:
                    de:4d:86:2b:4b:ec:26:68:51:59:70:fa:0d:3f:15:
                    3d:9e:68:fb:f1:6e:53:a2:4d:a0:4e:b3:0a:10:8b:
                    37:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:3B:7B:4B:D5:9F:03:D8:44:59:9D:9C:FB:88:6F:52:1A:00:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:43:9c:f9:f0:8f:17:50:36:42:d4:22:dd:4b:06:dc:ce:da:
         f2:a3:f9:b4:b4:54:b8:82:4e:bc:e8:54:cb:a4:eb:a1:1d:9e:
         04:35:b4:63:9d:4f:40:fa:d4:74:c3:b5:92:f1:a4:1e:a8:c6:
         86:c8:1d:54:7f:30:da:bd:19:39:28:12:c1:39:ee:3e:a3:15:
         1e:66:6d:5d:88:f9:fb:af:df:54:46:14:6d:c3:39:08:e8:37:
         5c:11:91:5e:a1:6f:40:ba:74:c6:7a:3f:22:66:93:4a:b4:e2:
         7d:c3:98:73:4e:f9:ab:ad:a1:b0:51:f4:cb:25:97:08:39:cd:
         f3:77:d6:11:8e:60:73:3b:4f:64:b8:9b:25:0a:dd:ad:24:3e:
         5f:de:fd:bc:88:ec:dd:0b:f2:75:d6:a8:58:7b:11:82:0e:59:
         8f:82:64:65:8d:e9:a5:a4:36:43:4d:03:76:e7:bb:30:55:02:
         1a:ce:02:26:21:8d:32:8d:41:c8:82:79:e3:26:d2:70:5f:51:
         ef:7a:5e:c0:c8:34:bc:9d:02:a6:ed:18:02:61:09:08:84:59:
         50:e2:87:3f:4e:74:b4:b9:9a:25:a3:71:9c:16:d6:f5:75:09:
         f6:a5:cd:a4:41:ab:d0:e3:85:a1:1b:d0:88:b5:48:45:04:e0:
         35:d5:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:32:56 2026 by rpki-client