Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef25052a-2daf-3b3c-a45a-85a260641bdf.roa
File:                     ef25052a-2daf-3b3c-a45a-85a260641bdf.roa (raw, json)
Hash identifier:          o3ytMDnUl0cPOPQQYrZvCJ9BOxpmfmmFaLu7AaG+r/g=
Subject key identifier:   A2:60:AE:63:15:60:8C:52:08:F6:F5:66:47:7A:85:F1:6E:36:FA:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986BB8068FDAF111D25D6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef25052a-2daf-3b3c-a45a-85a260641bdf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:bb:80:68:fd:af:11:1d:25:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=85d9534f-15a8-4b77-ac4a-626f39e94cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3f:49:c2:ae:cd:41:d9:84:6f:b9:8b:46:ec:
                    42:0e:01:7f:f4:f4:7d:5d:89:9a:44:ae:56:2c:7a:
                    aa:8c:28:ad:ee:ec:97:30:58:22:5b:c2:25:d1:84:
                    f4:b1:67:5f:e1:bb:6a:27:7e:f6:72:5f:92:21:1e:
                    b7:85:a1:b5:5b:e2:0c:54:b7:0e:c5:42:81:f7:56:
                    99:48:73:7f:d6:40:6f:e3:73:48:85:ad:94:2c:09:
                    b4:39:28:10:8a:8c:85:8a:c1:81:03:8f:c8:5c:3d:
                    b6:45:7a:42:0c:2f:9a:a9:7b:52:1d:95:66:88:06:
                    92:b0:aa:44:eb:b2:d4:dc:34:b4:8a:b8:7b:e5:e8:
                    80:30:86:8e:de:67:f8:77:bb:39:91:9a:00:12:2b:
                    5a:92:f8:ae:70:84:96:7f:08:95:50:1c:eb:62:49:
                    5b:85:43:a8:fa:51:fa:56:23:c5:71:99:10:72:53:
                    5c:2a:a0:ea:ba:07:fc:63:32:50:49:ca:5e:14:b0:
                    7f:66:19:a0:25:94:f2:86:7c:7e:03:92:19:44:30:
                    e5:0b:8f:01:12:b2:50:87:de:a6:bd:78:7a:34:1f:
                    c5:8a:73:15:f9:cf:21:c9:e2:88:bf:9f:a1:5c:dc:
                    99:02:93:32:61:36:58:cc:95:b8:d8:a6:4e:05:3b:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:60:AE:63:15:60:8C:52:08:F6:F5:66:47:7A:85:F1:6E:36:FA:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef25052a-2daf-3b3c-a45a-85a260641bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:8b:2e:65:48:92:fb:cc:5d:a0:9c:75:18:34:44:02:96:bb:
         57:68:61:4d:cf:36:ce:13:4d:cd:b6:36:d2:28:78:2c:6a:52:
         5f:59:1c:9a:6a:ad:d2:d6:62:aa:4c:82:ff:95:38:0a:6c:28:
         4f:d2:1a:b4:b2:b4:f1:5f:4e:d3:4f:91:d5:fa:7a:2f:ab:2b:
         83:d7:68:2c:4b:8f:75:e4:36:ee:99:cf:fe:66:59:e3:40:7c:
         f9:51:ea:b9:b5:a0:30:01:7e:74:b9:f2:11:f7:e3:9f:b6:6b:
         46:91:8e:bb:8c:0e:67:22:b0:2f:8b:01:e2:42:4c:53:7e:0d:
         52:3f:e4:ea:7e:d2:95:5e:30:19:83:05:e1:98:bc:5c:05:12:
         c7:4e:5b:76:34:6b:c6:76:ca:4a:79:76:cd:46:e7:93:64:66:
         18:69:39:9a:f5:d9:92:39:50:6d:60:67:c0:7f:e4:f9:88:d7:
         ff:63:ad:bc:f5:49:8b:00:33:3b:fa:99:8a:ad:60:ac:f7:77:
         9c:b5:bd:db:e3:9c:7f:e0:3d:db:16:3d:fb:34:37:41:d4:6a:
         9f:a2:1a:5c:12:a3:c3:d6:6d:05:d6:6f:88:b8:ca:ce:63:a1:
         7a:38:fa:87:7c:f4:f9:f0:5c:34:79:b5:8b:30:da:14:2e:8c:
         9e:c8:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:16:53 2026 by rpki-client