Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d2aa98-9939-38e9-bfb4-60eea8319891.roa
File:                     e9d2aa98-9939-38e9-bfb4-60eea8319891.roa (raw, json)
Hash identifier:          TM9fBqZOzZPW7u9tbyiwMnAtW8Z/RjZNPAC74yaV+do=
Subject key identifier:   17:6D:77:C2:BD:F7:3F:D4:05:75:DC:A6:9A:34:0D:8C:E7:F1:56:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7BC17DEE3757545E72600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d2aa98-9939-38e9-bfb4-60eea8319891.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396597
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:bc:17:de:e3:75:75:45:e7:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=8f47742a-ef1f-4d00-a2b4-dc3e2b7e25f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:dd:21:fb:a1:73:2c:38:8b:b8:81:a9:f8:
                    43:d0:73:c8:5b:20:7a:3d:a2:28:84:c9:2c:3d:26:
                    ec:7b:a4:ad:7f:3e:d0:5e:6e:03:b5:d8:1b:d7:00:
                    ca:cc:a5:46:78:2a:2d:4b:ba:a2:0a:18:82:d6:e3:
                    92:24:a7:ab:94:c0:55:59:21:a4:94:10:7f:48:07:
                    6a:c7:b9:8e:c0:d0:74:bb:ee:6e:c4:1d:cc:7e:4c:
                    53:16:4a:4f:09:68:4a:1a:2b:f5:1b:8a:7c:1a:cd:
                    40:2e:7e:f0:2f:19:ab:e5:fe:a3:2f:4a:97:a7:1f:
                    bb:a4:93:bb:d4:63:63:0f:0a:d9:be:7a:9d:9f:f0:
                    38:17:bb:05:30:3f:41:b8:53:cc:c3:c2:29:d1:87:
                    ef:3e:9c:6f:4d:f4:7c:df:d1:e3:f5:02:97:97:e8:
                    16:fe:26:6c:b7:69:d5:39:46:13:ee:76:6b:b0:cb:
                    25:52:5e:65:83:90:a0:00:b2:7d:b1:a1:d1:e7:79:
                    d7:4b:62:19:b6:77:c8:49:a0:ef:83:54:34:5f:63:
                    9e:1f:b0:b6:17:cc:ab:dc:a4:ae:f6:3d:0b:a9:cc:
                    41:e8:16:9d:9f:38:33:cc:2c:a2:f2:ca:3d:2a:a3:
                    d5:11:ef:28:7d:97:59:88:34:f2:b6:05:1c:75:e3:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6D:77:C2:BD:F7:3F:D4:05:75:DC:A6:9A:34:0D:8C:E7:F1:56:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d2aa98-9939-38e9-bfb4-60eea8319891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:3f:8d:14:91:86:a3:79:8c:cd:63:ec:6b:f0:09:cd:8f:
         d6:98:14:c1:3c:3c:b7:d1:32:cb:38:1d:5e:45:27:2e:d3:56:
         40:16:40:4c:56:4a:a9:82:d1:ab:4e:6b:ae:31:79:e5:e3:38:
         fc:43:d9:20:7a:54:05:fb:b3:be:05:4c:50:59:bb:35:bf:53:
         27:45:57:7d:e6:3e:90:8e:f2:58:a5:2d:c0:8b:4e:f5:b5:e0:
         5b:20:88:3e:a2:49:cc:f1:f7:21:d0:4a:cb:f6:a3:ef:d9:1f:
         f7:3f:cf:b6:b6:0b:5d:a3:7f:d0:93:9b:56:2b:73:b3:5d:de:
         26:ad:70:36:ae:e6:79:2a:4a:39:1c:88:5a:ff:f3:06:b9:ad:
         74:bc:44:d8:83:5b:40:df:21:fb:59:79:6a:48:26:d1:31:f5:
         0c:30:ac:d9:98:be:35:2c:0c:46:c4:66:ea:11:35:a2:f2:64:
         ca:d9:e0:82:6b:cb:35:44:cc:46:db:8c:0d:42:d5:6d:e8:3b:
         a1:a6:96:2c:f6:95:ea:ba:ac:f8:70:4a:8a:23:e3:9f:bc:0d:
         20:5b:e7:ed:1b:8e:9a:ba:27:95:11:ed:7e:c3:e5:64:8a:36:
         a8:9c:80:c1:d1:54:13:44:7a:7d:aa:83:f3:22:42:65:95:10:
         27:08:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:54:30 2026 by rpki-client