Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4a089dc-0839-3e41-add4-c08ce9e6274a.roa
File:                     c4a089dc-0839-3e41-add4-c08ce9e6274a.roa (raw, json)
Hash identifier:          g3fAXOYDJM309VUcLRdxevcampJ8W7gwBGyNeVReILA=
Subject key identifier:   EA:3F:B3:4F:DB:CB:79:E0:56:CD:9D:2C:F5:DB:C9:F3:7B:19:E7:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0672876CC97807F906804C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4a089dc-0839-3e41-add4-c08ce9e6274a.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396583
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:87:6c:c9:78:07:f9:06:80:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=dcc86a68-8afa-496f-b6f1-5fd2c3a3809a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:b2:9a:bc:a0:f4:10:2e:d5:67:ba:d0:0f:
                    c8:25:be:10:8a:87:f4:d3:d5:17:cd:5d:85:bf:37:
                    88:1f:05:a4:c6:03:92:be:f5:22:2e:8f:62:a5:59:
                    da:2c:91:ee:fa:20:44:94:92:8c:08:26:d1:c2:5c:
                    f2:12:1e:b4:6d:4c:61:8c:38:5f:db:1a:ee:3f:de:
                    f6:e7:e2:f3:11:8e:e9:b5:3c:9c:ac:d0:7d:63:2c:
                    82:41:ad:51:ff:c4:32:e3:8c:47:43:6c:5c:7e:a9:
                    c9:05:d2:92:72:70:43:13:ae:e0:5e:57:84:67:b4:
                    81:eb:d2:50:0c:db:ee:b0:7d:05:49:c6:76:61:db:
                    1e:3f:71:ea:f8:2f:7f:7a:a8:48:db:f4:26:74:e6:
                    ae:5c:63:8d:e6:5b:61:7c:33:88:88:91:4b:87:4a:
                    18:c0:d8:a1:97:c1:e5:46:48:40:96:51:f1:86:5b:
                    03:14:6d:17:ef:02:3e:2d:f3:ff:61:18:ab:89:8c:
                    e3:8f:fd:8a:88:39:74:e8:49:ef:51:31:81:59:74:
                    05:e0:cd:a7:2d:6b:4c:51:e6:7a:7b:a5:5a:cf:77:
                    d0:12:14:43:f1:6e:b8:95:a4:5a:16:ef:99:54:2b:
                    7e:23:55:9d:c6:78:0a:67:4b:4c:22:07:01:f3:f7:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3F:B3:4F:DB:CB:79:E0:56:CD:9D:2C:F5:DB:C9:F3:7B:19:E7:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4a089dc-0839-3e41-add4-c08ce9e6274a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:67:5d:e2:c4:bc:1f:a6:e5:bb:53:c7:63:f9:db:2f:45:30:
         5a:b3:53:6e:50:c3:93:03:bd:cc:30:28:8e:9f:28:51:94:60:
         a4:0c:01:4f:38:ca:5e:7b:b3:cb:8f:78:ab:45:3a:fd:13:6d:
         ac:8a:76:01:5e:77:11:bc:5e:d5:8d:42:1e:a7:4e:92:76:0b:
         1e:92:3d:79:ef:b6:70:4c:b4:16:3a:b1:74:92:66:0b:32:55:
         8d:5f:f9:14:c9:a7:6e:49:35:0f:4f:34:f5:8e:d9:aa:b2:79:
         29:ea:a5:d6:b7:be:14:70:c2:94:85:91:5b:9b:29:aa:1a:ef:
         30:5a:a4:58:1e:b5:c4:2a:4a:7e:4d:44:b4:29:05:7f:cc:f9:
         b6:8c:73:f3:64:ac:be:9c:e8:11:32:a6:00:43:20:ef:15:c1:
         54:bc:0b:3c:77:39:f6:05:e5:2f:82:e4:a2:67:5e:33:e0:ea:
         ba:f7:a3:10:42:8e:d1:18:24:af:35:55:f3:88:a7:83:86:e2:
         b8:3b:85:e3:40:7c:15:2b:76:96:72:82:53:cd:bc:79:8b:42:
         36:6d:bf:47:16:54:d1:69:2e:c3:7d:46:4b:72:b4:a2:88:8e:
         17:79:3b:c4:26:ec:1c:3a:d6:12:f8:59:0c:34:8a:1b:1c:58:
         ec:77:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:58:30 2026 by rpki-client