Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e71ed8-c327-3a2f-b1d2-e5ec8bf9a5c8.roa
File:                     16e71ed8-c327-3a2f-b1d2-e5ec8bf9a5c8.roa (raw, json)
Hash identifier:          0DA/SmY6HKtR1Z4xALVC4ejn818pQYodH11s5DE2vDI=
Subject key identifier:   97:8C:5B:8A:A3:DE:3C:8F:AB:87:A4:1A:5D:08:E2:7C:0E:3B:24:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E736A2E6877A27DBFF26A4120
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e71ed8-c327-3a2f-b1d2-e5ec8bf9a5c8.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     36624
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:2e:68:77:a2:7d:bf:f2:6a:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=bc045508-2a0b-423a-bc40-52595194940d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:05:1e:b7:52:83:cc:92:04:37:f2:d3:2b:
                    b9:83:e3:56:6b:59:cd:c5:2d:51:31:1a:74:49:a4:
                    f7:d0:f7:29:5e:0b:0d:a6:62:28:eb:87:29:b5:3b:
                    6c:9b:a6:8e:ba:86:b2:d1:45:d8:60:69:53:17:94:
                    6a:90:e9:18:14:2c:05:48:40:48:61:94:74:98:72:
                    27:61:e2:08:cd:00:99:6a:57:0d:3a:ad:52:86:aa:
                    07:aa:ed:01:83:79:57:b5:de:e1:88:87:ea:6a:57:
                    c9:35:83:a6:c2:06:81:38:c4:ec:88:26:0e:6b:79:
                    6a:7c:d2:f5:25:34:af:ea:62:c1:2e:89:e4:d8:1f:
                    ce:a0:f1:07:2c:1d:f6:3c:21:ca:f7:e6:75:12:c0:
                    56:88:43:d4:1c:3c:17:c4:ab:16:36:93:ea:bd:79:
                    f9:16:13:3a:7f:9e:56:c9:d7:6b:21:e8:c7:0b:99:
                    47:f4:96:44:a8:85:e3:76:99:e3:38:b1:86:72:05:
                    ef:18:af:94:38:35:39:ea:b3:82:cb:37:cf:f0:70:
                    66:a0:44:71:52:67:03:70:e2:ab:82:ad:95:44:fb:
                    85:73:57:a6:eb:51:43:85:26:07:fd:06:57:fa:4a:
                    48:25:f2:36:23:09:13:24:78:08:b1:76:5e:16:ec:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:5B:8A:A3:DE:3C:8F:AB:87:A4:1A:5D:08:E2:7C:0E:3B:24:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e71ed8-c327-3a2f-b1d2-e5ec8bf9a5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:82:5e:dc:fc:7b:2e:67:0f:20:df:d2:16:af:fc:89:00:9b:
         d8:8b:c0:f2:12:de:cb:63:21:b5:c7:8e:da:78:24:07:48:3c:
         33:dc:88:a3:05:c4:38:2d:b1:7a:e7:39:a7:43:77:4d:b7:d6:
         aa:bc:b7:77:87:c1:1e:fd:09:58:09:75:05:ac:36:57:7b:f7:
         fd:4d:60:a9:c7:b2:03:00:a1:5e:7e:5c:38:1f:ee:f2:49:08:
         07:36:c8:2d:0e:f7:bc:e1:d2:58:0f:51:d7:0e:ef:86:63:cf:
         4a:c8:21:6b:86:22:87:26:e0:35:9f:a5:3c:92:5d:8e:f5:a2:
         7e:b7:54:77:4c:39:09:be:ba:6a:29:71:5a:47:f1:55:27:9f:
         3e:ad:68:9e:0d:e6:21:c1:e7:f9:ba:36:dd:bd:90:66:36:f7:
         92:92:18:97:b1:94:37:c0:16:f5:5e:47:52:ce:6d:57:ce:0d:
         c3:90:64:10:36:cd:8a:f0:a0:6b:0c:28:15:e8:ae:20:b7:26:
         24:f5:c0:66:bc:a5:09:f3:e3:93:fb:53:a1:35:66:67:5f:38:
         56:c7:b8:60:3d:2a:b7:0d:07:1b:e4:82:5c:42:c5:e5:10:61:
         3b:1a:44:c6:97:60:02:41:87:9c:6e:15:a3:f9:fc:1a:cf:83:
         01:52:be:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:32 2026 by rpki-client