Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00848a6a-98d3-34fd-a1e2-007404c66cca.roa
File:                     00848a6a-98d3-34fd-a1e2-007404c66cca.roa (raw, json)
Hash identifier:          ikLm7VhXXIkRLNrsa/7o5KjSWPsHAzq2w9fPz9i3Poc=
Subject key identifier:   80:C9:92:FB:66:71:AE:AB:B1:8C:EF:19:8F:2E:E7:4B:04:A0:A8:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64F1A4E3452759377571B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00848a6a-98d3-34fd-a1e2-007404c66cca.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     397204
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f1:a4:e3:45:27:59:37:75:71:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=ca10a61a-4f9a-4bad-a132-1605be09083b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:58:82:63:10:d4:1c:31:42:9e:5b:15:80:90:
                    08:ab:63:ca:20:40:3d:7a:63:c0:ff:67:20:27:d4:
                    c1:55:85:bf:f6:57:23:49:4e:54:32:4a:99:52:b6:
                    c2:3a:93:80:f9:63:35:94:c0:e5:8a:2f:3c:07:2c:
                    1e:b0:0f:83:c8:ba:37:74:67:8a:5b:21:20:be:e7:
                    50:4f:be:8d:67:87:78:28:74:10:d6:73:82:88:74:
                    65:7c:f3:d0:5a:04:83:d9:22:af:a1:77:f3:38:96:
                    67:ec:ad:a1:0b:85:ea:0a:eb:66:4f:14:77:34:7f:
                    a6:81:c3:46:ab:f6:0f:8c:1b:f1:b3:d1:32:9d:d4:
                    a0:c2:39:b3:fe:d4:6a:cd:af:b4:58:4e:59:d8:16:
                    81:22:dc:36:64:06:3c:da:f4:50:5d:09:4e:d2:44:
                    d9:c3:6a:ef:75:6d:01:d7:37:08:d5:fc:0d:4a:34:
                    35:be:69:bd:e1:5e:99:3a:39:53:25:4d:cd:b5:b3:
                    bb:63:9a:56:05:f8:9e:f6:8f:ce:15:53:b0:dc:35:
                    f0:d8:f6:6c:3a:90:b6:a9:6f:09:ff:7a:1d:9d:a8:
                    59:51:84:ee:19:52:55:20:40:15:4e:31:c7:14:4c:
                    a8:7f:b5:7e:8f:81:09:34:4f:7b:00:b5:1d:82:2c:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C9:92:FB:66:71:AE:AB:B1:8C:EF:19:8F:2E:E7:4B:04:A0:A8:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00848a6a-98d3-34fd-a1e2-007404c66cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:da:30:e3:24:0d:dc:9c:b2:a9:fc:21:78:a2:a4:fc:b4:
         f6:55:59:c6:59:6f:e5:77:2f:b9:a4:c4:14:a3:87:6d:91:e1:
         f1:43:01:7d:f5:e2:e3:36:47:03:6b:f4:a9:0a:de:20:d3:57:
         bb:43:64:43:44:f9:34:51:bc:8b:20:5f:bc:2f:55:99:26:ba:
         24:62:75:7d:fb:f4:b5:44:04:a0:fa:79:dc:bb:25:8f:3c:43:
         54:2a:80:4e:43:9f:97:1d:65:e9:37:f6:cc:ea:42:bd:a6:19:
         2b:7e:96:5f:1d:66:03:55:ad:b7:ef:1f:d0:bf:59:f8:85:b7:
         50:aa:c9:7c:97:75:25:8b:83:1d:c7:1f:10:81:b6:33:0e:b7:
         6e:d3:2d:89:12:49:24:ec:98:59:5f:28:0a:b4:f7:2d:ea:68:
         e7:0a:50:99:3a:89:32:3d:96:74:0a:af:8d:ec:54:b5:b2:f0:
         75:d6:39:9d:65:3c:62:dd:e2:c9:6d:af:a2:09:cf:0b:f6:35:
         21:7a:e4:96:db:62:9f:6d:df:72:dd:80:ae:78:d6:dd:f0:ec:
         f7:39:92:27:6a:4d:df:eb:e4:3e:bc:13:04:ff:24:2e:eb:b8:
         3e:a5:b6:a8:c8:18:d5:1f:a1:f5:98:98:5e:83:d3:73:8d:d7:
         cc:eb:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:59 2026 by rpki-client