Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c70915e9-6d37-3eb6-bbba-33de574edf7d.roa
File:                     c70915e9-6d37-3eb6-bbba-33de574edf7d.roa (raw, json)
Hash identifier:          jcW0+i7mN0Xc8DiYAAoEvyXG/B1YYYNfFRI+AvuIM6o=
Subject key identifier:   0B:91:DA:58:04:4F:90:DB:A4:84:F8:E6:47:39:5A:6D:CB:8B:6A:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498C114CC8E4FF25BB533C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c70915e9-6d37-3eb6-bbba-33de574edf7d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396540
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:11:4c:c8:e4:ff:25:bb:53:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f0aaff1f-2f84-44db-b695-0bc3c5863087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:24:f7:0b:4d:ca:60:96:0e:8a:3b:2b:7f:
                    b1:6e:e1:ee:f3:b4:48:5f:1c:11:e5:24:e3:f7:00:
                    c1:56:64:e1:15:f1:3a:a1:69:30:66:c8:91:7c:07:
                    9c:c3:1d:35:5b:11:a1:44:cd:8d:4f:ad:7b:81:40:
                    e6:98:04:e3:24:36:10:87:1d:c9:4e:ab:fb:41:f3:
                    e0:50:2e:a8:f5:db:a1:d8:37:97:4a:c6:6d:79:ef:
                    c9:65:56:c9:fd:9b:ab:9b:2e:ff:1b:07:34:22:7e:
                    0c:86:c0:8f:ba:12:77:18:2f:13:82:46:cd:e7:fc:
                    bb:1d:69:bb:f8:fa:ca:35:63:4e:5c:f3:64:67:3a:
                    60:d7:1d:99:e1:6e:ad:72:24:73:fb:e3:2e:24:ec:
                    29:e4:71:4b:18:ed:da:2f:3a:be:7f:65:14:8b:1d:
                    c8:16:64:fd:e0:1e:09:6a:d4:1f:bb:a0:b6:9c:1e:
                    9d:3f:9b:21:bc:31:57:36:29:b2:ed:68:6c:55:c9:
                    4b:7b:aa:aa:93:26:e1:73:f5:de:25:92:86:89:08:
                    dd:e3:1b:9d:cf:ca:2b:c0:2b:0c:ef:72:33:22:74:
                    f1:d3:c7:9f:f2:a5:44:aa:f4:e0:6d:8e:19:f3:65:
                    5d:9d:63:41:48:37:29:39:40:7d:cf:2d:d9:3c:21:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:91:DA:58:04:4F:90:DB:A4:84:F8:E6:47:39:5A:6D:CB:8B:6A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c70915e9-6d37-3eb6-bbba-33de574edf7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:58:25:d1:98:8c:cb:8b:80:dd:e4:ba:93:4e:ec:d0:d7:
         15:a6:49:b5:9d:71:c6:94:b0:c3:07:9f:10:48:34:2d:bb:02:
         f9:36:5e:73:22:6b:33:a5:7c:bb:d6:57:f5:fe:25:3c:36:15:
         6e:76:5c:2a:db:c1:45:19:15:00:96:6f:e0:aa:5c:1a:1c:60:
         e6:27:59:8a:4b:07:3d:38:2b:93:c0:d6:fd:96:97:55:de:8b:
         bc:a5:8d:74:e7:52:d1:7a:e0:2f:06:33:80:46:b7:4f:eb:a5:
         75:49:94:62:b5:b3:8c:bb:55:b3:30:7e:79:80:ee:c0:80:86:
         e1:fe:c8:5b:84:79:49:0d:00:aa:90:10:c2:e9:3c:9d:ac:b8:
         cf:b2:d9:e6:8c:5a:87:5f:c0:ee:13:c5:27:74:c5:10:26:39:
         24:2e:93:7d:00:df:87:b7:90:10:68:97:47:1a:5d:9c:bc:d6:
         31:1d:a3:c6:b3:33:0c:57:e1:c9:e0:2f:3e:ac:81:f0:a5:25:
         b0:e7:3c:d8:5c:86:92:10:da:a1:a9:95:63:6e:9d:9e:ca:e2:
         13:c3:a6:bd:36:a2:c2:86:02:19:9b:54:2e:59:00:75:6f:5f:
         b2:04:25:37:66:0f:5d:e0:e5:8c:e0:79:b1:73:54:69:e3:50:
         91:15:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:24:54 2026 by rpki-client