Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcd56e78-a0e8-3448-998d-0badac53b0f5.roa
File:                     fcd56e78-a0e8-3448-998d-0badac53b0f5.roa (raw, json)
Hash identifier:          u+I4VrUCjUwEZbPNKYTED1LC6h2MaaUW4bXJm6nzSSQ=
Subject key identifier:   BC:97:9E:44:ED:BC:E9:89:CD:0D:E2:59:DD:4A:4C:E7:49:D3:A6:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFB20E23BCD4681DC8A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcd56e78-a0e8-3448-998d-0badac53b0f5.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396609
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:fb:20:e2:3b:cd:46:81:dc:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=d48d73ca-0dc8-4aef-a8de-c414f3bc6a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:e1:c7:a1:e7:f5:ce:98:63:8d:24:01:37:
                    e9:ed:ad:2f:0d:d0:36:1d:e8:f7:21:0b:4f:34:79:
                    4e:97:c8:59:e2:d9:b4:7f:46:03:75:78:d4:07:e8:
                    de:dc:1c:f8:26:53:d7:86:8a:33:71:b8:e5:02:7f:
                    17:97:af:c1:09:8f:ce:13:f8:e8:7f:a2:a6:2f:bc:
                    29:79:53:d1:d8:68:98:e2:b2:9f:5f:86:b8:70:f7:
                    bd:2c:96:12:8e:93:bd:bd:5a:18:5a:9b:2d:47:81:
                    b6:bd:fe:2d:7b:2e:1c:09:4e:fa:dd:d7:98:dd:94:
                    87:00:79:35:8a:f3:02:72:90:2b:71:d1:fe:9d:0c:
                    a7:11:24:e1:71:47:e1:72:40:7e:d4:1c:60:5d:73:
                    fb:a1:7c:e4:61:91:e9:77:73:51:1b:1a:cd:28:15:
                    cc:20:0b:1e:7a:0a:ce:49:67:fb:75:69:bf:c0:5c:
                    23:62:c7:58:e2:7d:12:8f:93:a0:5b:e6:cb:43:91:
                    ce:fc:ca:c1:8a:7a:bf:5e:e1:2b:4b:f1:8d:8e:19:
                    ce:61:5d:80:5a:04:75:02:f5:ed:7a:33:5e:30:cc:
                    53:78:e2:4b:a9:6c:91:0d:87:74:44:0d:fd:b8:e1:
                    90:ad:5f:ec:88:0a:61:81:0c:c8:0b:ac:3f:48:7e:
                    88:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:97:9E:44:ED:BC:E9:89:CD:0D:E2:59:DD:4A:4C:E7:49:D3:A6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcd56e78-a0e8-3448-998d-0badac53b0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:7f:d1:cf:ef:f1:96:b7:4d:ae:54:70:a5:61:7c:86:c7:
         2b:eb:e9:f9:52:63:e7:0d:6d:77:4d:7c:55:28:9c:d3:50:ab:
         a4:72:f6:bc:c4:6e:f6:f6:6d:d2:4d:9c:e6:b0:a1:a2:37:83:
         93:0e:36:9e:8e:47:bc:ce:35:e7:02:5f:43:39:ad:7b:b1:70:
         d0:5c:92:10:ad:e0:c8:f7:57:08:ee:2d:68:0b:2d:82:2e:93:
         b8:34:71:12:01:c4:f6:12:38:17:48:fc:67:e3:e4:c9:20:5e:
         fe:bd:a2:60:bc:cd:93:54:35:83:8b:6b:f6:4c:21:a0:81:11:
         3c:6e:73:12:7f:00:25:5a:d9:ce:21:32:dc:44:bc:5c:de:13:
         71:e7:ad:48:72:e4:ca:ed:5a:2f:c9:af:f7:4d:3f:b7:04:90:
         d8:c5:4b:de:b6:95:78:73:05:c2:07:47:00:45:ce:c5:75:25:
         1b:f2:54:f7:d9:2a:90:40:ae:99:82:74:b6:9a:00:28:f2:97:
         49:7f:b1:83:11:03:67:97:74:ba:92:71:19:31:27:f5:a1:3f:
         85:98:48:2f:ed:65:c8:c4:56:eb:2f:45:43:d0:3b:81:42:ff:
         48:36:59:36:85:53:c7:cc:9d:14:87:02:21:32:3b:e7:8b:c9:
         32:c7:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:53:34 2026 by rpki-client