Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0352415a-8285-3759-bf8e-cc29ea806247.roa
File:                     0352415a-8285-3759-bf8e-cc29ea806247.roa (raw, json)
Hash identifier:          VEUMdaqlLDHSaGhW+sl/d8dzZBitPHiqGVWgUYpIx4Q=
Subject key identifier:   43:35:1A:28:5B:1B:32:1B:B2:A5:E2:EE:76:6E:36:7A:DD:EC:6D:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5A4A195B07E1BA14B0AEC980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0352415a-8285-3759-bf8e-cc29ea806247.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     396606
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:19:5b:07:e1:ba:14:b0:ae:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=efdb9bf0-f96b-4c03-bd88-66bdfcb15db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:d7:d7:ec:71:91:3d:ef:32:ff:3f:28:e9:
                    49:55:6c:5a:69:63:75:7f:ee:e1:09:9f:ab:81:8b:
                    d1:c1:9c:a0:2b:a3:a3:33:94:19:2b:3b:2a:84:54:
                    c7:0c:35:cd:2d:6a:77:b7:8a:07:57:0a:b0:3b:52:
                    d7:17:a0:36:bb:82:ae:88:2b:64:ee:02:d3:c0:ee:
                    67:b8:e4:d5:98:ac:33:2b:2a:74:99:40:ff:36:d5:
                    2b:94:bd:3e:c7:66:77:47:45:ec:fb:18:96:5a:78:
                    34:ec:4e:e3:4d:0c:a9:ed:ec:d8:de:98:6e:fe:b4:
                    8b:5d:78:d8:61:dc:4e:6c:f7:5e:cf:df:45:65:c3:
                    39:b3:04:50:c7:a8:69:14:ad:1c:4e:38:f5:41:af:
                    a4:f2:72:ad:41:72:9e:9f:c9:4d:f4:62:0a:0e:93:
                    e0:be:e4:32:ad:9f:1b:07:91:9d:81:0e:4c:07:8e:
                    fe:cb:97:6c:62:1c:38:a1:73:7c:6e:55:47:3a:6e:
                    d4:13:85:b2:6f:1d:f7:7d:80:62:43:54:13:af:e8:
                    6d:8f:85:a5:05:66:ca:0c:1f:a4:e2:17:ff:f0:d8:
                    6f:b9:a0:bd:64:6e:26:07:df:a1:0d:a4:34:17:3f:
                    b7:51:b4:82:bf:be:c1:82:aa:4c:42:c3:0e:f7:ce:
                    e6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:35:1A:28:5B:1B:32:1B:B2:A5:E2:EE:76:6E:36:7A:DD:EC:6D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0352415a-8285-3759-bf8e-cc29ea806247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:96:35:a8:a0:91:3f:1d:51:cc:73:56:2d:94:4d:1d:6a:9f:
         ae:7f:d8:73:62:ef:fe:81:dc:1a:d7:fc:bb:99:8b:ce:cd:c5:
         e7:ca:75:f1:9f:c8:a8:c3:ca:54:ee:02:89:86:bf:d0:45:99:
         28:ef:73:2c:f1:57:23:e6:31:12:17:00:ee:e7:d2:0c:8d:f8:
         d3:8c:4b:f1:01:e3:fc:05:d7:3c:57:dc:60:85:5e:93:71:f1:
         4b:10:d5:3d:66:72:e9:d8:f2:4f:98:55:ef:ba:2a:6e:f6:4f:
         13:7b:2f:23:5f:18:d4:5f:e2:26:2c:9a:a8:d8:07:8e:18:07:
         71:d6:ba:90:47:f1:95:0a:76:d2:10:e5:90:b8:bc:06:63:c3:
         51:89:97:6f:d9:7c:e3:ea:bb:13:c1:b3:7e:9c:64:7d:6a:78:
         1c:45:93:93:3c:09:4a:5f:4e:7e:49:19:60:37:5f:01:85:32:
         e2:8a:e6:76:ad:36:b6:11:8b:64:87:13:f0:d5:f7:9b:34:18:
         65:ad:b8:dc:0c:31:ca:f1:82:99:c4:78:76:21:c4:5e:c8:09:
         2b:84:ef:57:24:52:ea:6b:c3:81:7b:8f:75:10:8e:97:9f:90:
         1b:1f:5a:b5:a0:d7:34:b6:cd:5f:03:06:84:2d:8f:77:fc:84:
         98:42:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:39:51 2026 by rpki-client