Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa
File:                     11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa (raw, json)
Hash identifier:          QhWcLgeaZknIYu0OqY3rN01bFGC1qjhmnrdH+t9ndrQ=
Subject key identifier:   E9:55:CB:76:36:90:38:37:4A:42:2B:2F:B7:4C:6B:53:80:46:D4:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA2BAE94D954A4FC8BC300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396563
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:2b:ae:94:d9:54:a4:fc:8b:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=3d81bcfd-00c5-486b-9358-3c4efced1c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:09:64:75:a0:3e:5f:01:3c:ea:6b:56:7d:
                    cb:dd:39:c3:b9:be:34:92:11:23:d4:99:ac:5f:c0:
                    69:67:fa:d2:0d:3c:2e:8a:fa:40:f8:47:67:4a:a9:
                    11:45:0d:46:6a:5b:8a:48:f9:db:99:51:d0:9e:78:
                    17:cf:a0:1d:fc:fd:53:0d:f9:22:cf:47:e2:d7:40:
                    86:7c:d8:64:28:70:d2:14:40:02:3b:ee:d6:8f:5e:
                    3a:59:2f:5c:8c:a1:e1:3c:03:d2:a3:a5:cf:5c:a9:
                    a6:85:5a:34:37:6f:f1:59:19:a2:8a:32:26:cc:4c:
                    89:9e:b2:f5:e6:7e:7b:4c:e8:bc:5c:d2:0a:80:82:
                    20:bb:09:ea:7e:a9:5c:b4:9c:04:00:a0:92:f2:a2:
                    fc:00:1b:f3:5f:1d:ed:bd:cf:03:3b:1a:7e:a4:08:
                    ad:e6:69:14:06:2b:bb:43:f8:5f:06:52:fa:30:d9:
                    b5:83:a5:0f:25:45:55:16:1f:8a:f5:27:55:75:68:
                    a9:62:ab:06:62:fc:16:29:f0:53:b5:cb:27:98:f9:
                    9b:d0:98:38:43:b3:ef:3f:8f:fc:7d:be:08:d6:75:
                    e8:e7:58:a8:3a:8c:39:3b:93:d7:40:8e:e0:07:38:
                    c6:4f:ff:65:24:3e:31:74:1f:e7:6f:4c:46:6e:66:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:CB:76:36:90:38:37:4A:42:2B:2F:B7:4C:6B:53:80:46:D4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:35:02:56:b2:ac:71:79:c2:96:bf:ba:f2:37:c6:94:51:
         9e:62:b0:3f:6c:83:5f:46:5e:45:a4:bb:a5:05:d9:d5:df:5a:
         f8:6a:9f:05:dd:22:d4:18:7d:87:57:25:b0:a5:82:6d:bf:e1:
         39:99:0b:a8:9f:ef:c7:e1:9a:f4:82:93:6c:d4:70:50:8e:6e:
         7e:69:04:7e:34:c7:84:8c:47:5b:f4:60:5e:f2:76:c8:a2:2a:
         fc:cf:e2:ee:81:ea:93:bd:c1:21:db:f1:3c:49:cf:8d:a7:21:
         c7:e2:65:4e:83:96:0a:5d:d2:2b:45:23:66:6c:18:b8:dc:ed:
         9b:2c:e1:92:57:5b:e1:14:55:ed:5a:7e:63:ce:14:8f:04:a8:
         ee:18:50:8c:d3:91:45:61:33:e8:82:76:df:cd:d9:d9:0f:0e:
         71:96:15:48:5e:88:9e:4f:f8:5b:df:7a:a9:7f:13:28:56:8a:
         5b:a5:4e:c5:8c:c8:d7:a7:f3:dd:34:f4:ec:f2:f3:32:a0:37:
         ef:f8:04:44:d8:2c:c8:6b:54:93:0d:90:18:e6:8c:fd:0f:fe:
         51:49:cb:69:68:d3:14:12:e8:b6:6b:fa:0b:e8:1f:0d:3c:ec:
         2d:b6:e5:33:57:50:05:81:aa:c6:34:5a:cb:6c:f6:4a:60:c1:
         0b:48:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:35 2026 by rpki-client