Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25d1c1a8-ab5b-391a-8dcf-6e70d65c1f9f.roa
File:                     25d1c1a8-ab5b-391a-8dcf-6e70d65c1f9f.roa (raw, json)
Hash identifier:          UXXZyGaH9LP6EYq2hw4DXlWAeIJKLU/tWhC/wvAGLkc=
Subject key identifier:   80:20:96:6F:FD:DD:70:B6:46:D6:50:4E:56:87:1A:8D:1A:A7:31:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6C6F7146EBE934B942119AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25d1c1a8-ab5b-391a-8dcf-6e70d65c1f9f.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     396604
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:71:46:eb:e9:34:b9:42:11:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=c1b1660d-5b84-433a-9423-576cd4268318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:0a:99:32:8b:1b:f0:d5:94:91:c2:ac:06:
                    20:05:d6:ec:43:76:7a:d8:81:e9:58:c2:c6:eb:9a:
                    dc:3e:9f:80:d8:fb:7f:99:0b:b8:4f:98:70:be:8c:
                    f2:09:2b:88:1e:a6:38:d4:5c:7c:b5:08:b1:fd:3e:
                    6f:cf:a9:d0:bd:85:6f:10:8a:70:fc:c0:8e:f4:d6:
                    55:a2:91:a2:89:d1:63:20:f1:85:53:05:67:22:d7:
                    bc:d3:56:85:b5:72:e8:bb:32:7a:5b:49:e4:e3:4f:
                    b4:49:17:8e:18:4a:2e:a1:9f:17:0e:ae:0b:f6:d5:
                    6a:b8:8b:ad:e9:2d:e6:52:f7:0c:85:d2:04:25:9b:
                    9f:f0:eb:a7:e0:a7:e4:e9:77:f7:ab:ce:26:c7:65:
                    f1:14:93:e5:4d:79:3a:fa:62:33:ce:5f:5a:fc:59:
                    b8:5f:e6:68:41:e9:13:76:66:20:e1:e6:41:20:df:
                    20:34:8b:27:45:52:8c:de:1a:36:a1:21:41:ae:da:
                    af:a7:eb:7f:ee:ac:36:20:65:3b:5d:dc:e2:49:f3:
                    15:1f:ed:4a:83:40:30:50:61:d9:c2:ac:e6:04:36:
                    fe:9d:50:35:51:b4:97:20:cb:ff:c7:8c:c9:2f:bf:
                    7b:25:c8:c4:5d:8e:e2:32:d3:06:a9:d8:47:43:a3:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:20:96:6F:FD:DD:70:B6:46:D6:50:4E:56:87:1A:8D:1A:A7:31:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25d1c1a8-ab5b-391a-8dcf-6e70d65c1f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:70:4e:ae:6d:f2:45:79:4c:53:2d:b7:9b:8f:df:9b:80:2c:
         fd:6e:a5:21:5d:99:68:c0:a5:c0:5b:76:2a:22:d3:91:b2:57:
         46:17:4c:49:ee:1e:78:62:9a:4d:9d:e3:ab:54:8e:fe:46:67:
         c4:a6:3f:c5:02:f4:3a:66:db:80:2d:3c:91:24:05:20:56:55:
         64:a7:f7:e0:7f:5b:28:03:d3:6a:89:08:51:03:30:67:bd:7b:
         44:c2:66:0d:a8:f4:61:1d:86:62:87:1d:da:55:e1:b0:65:d9:
         d5:36:6d:74:2b:ce:18:9c:3c:4e:35:41:38:37:28:af:81:dc:
         00:df:8f:db:83:e5:df:8e:a4:fe:8d:08:54:f7:5a:31:e3:04:
         57:f4:e7:91:65:e0:bb:69:d7:5b:9a:d8:28:ab:e5:36:85:df:
         2e:95:c4:90:7e:68:5c:44:bf:3e:66:b7:72:9c:6e:8d:a3:01:
         71:b2:5d:c4:e2:5d:22:f8:97:6a:2f:7b:89:ba:65:1c:51:5d:
         fa:2a:7c:ae:78:5b:23:d3:1f:e6:e8:1f:f4:b7:77:25:4e:6f:
         7d:bd:08:39:94:c0:dc:42:cd:dd:af:e5:6e:30:56:f7:65:67:
         07:80:15:6e:1a:d8:82:28:39:11:0d:8b:ae:88:6d:dc:4d:9d:
         c3:19:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:36:54 2026 by rpki-client