Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa
File:                     2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa (raw, json)
Hash identifier:          9XmVW6iYqyzbYeLd5CGdy/fCcyXy1reZvWnwrZWQ/5s=
Subject key identifier:   42:F2:E2:A3:99:FE:40:AD:44:5E:9E:60:7D:C9:FD:17:4C:BC:5A:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA9025C519604D2549700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396581
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a9:02:5c:51:96:04:d2:54:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=2c4bb187-3c12-4171-ba49-f7bfaa007ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:20:b6:fd:8a:54:94:64:65:a7:da:4e:4e:
                    58:b2:08:85:0a:68:1b:a5:ea:fc:f8:9c:c3:ad:eb:
                    e0:cb:8f:73:fe:74:3b:b5:f0:8b:ed:0b:a5:dd:e3:
                    90:d2:8f:79:3c:c3:48:4c:bb:bf:31:41:be:92:30:
                    8e:f8:e5:7e:72:47:11:26:70:6a:b9:78:c5:a7:52:
                    ac:1e:a5:63:47:be:de:f7:f6:a4:68:6c:77:f6:05:
                    1d:49:72:97:a5:36:fd:2b:ef:10:93:13:c3:7b:48:
                    a4:ad:91:87:f8:91:96:68:05:6e:cb:82:83:cb:98:
                    6b:17:e8:d1:5e:46:ce:43:28:fd:c3:1e:89:4f:89:
                    bb:61:c8:19:d9:76:69:ed:59:cf:e9:87:09:8d:6c:
                    de:27:cf:17:f4:cf:d2:a6:ea:b7:b4:62:6b:8a:37:
                    d9:4e:bf:2b:52:30:10:a5:e7:91:37:4f:af:e8:2e:
                    12:a7:b0:c0:1a:a4:de:b6:6a:7d:22:16:ba:70:85:
                    b4:1d:22:60:47:07:9a:07:07:0d:d5:2f:5a:a1:5c:
                    41:88:b9:e2:08:dc:c9:7e:51:e2:62:c0:75:bd:de:
                    dc:a6:ce:31:aa:ec:e8:da:7e:3a:8c:6d:3a:de:dd:
                    b1:38:da:ca:be:df:f8:af:70:ed:2b:a3:a9:ef:85:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F2:E2:A3:99:FE:40:AD:44:5E:9E:60:7D:C9:FD:17:4C:BC:5A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:a7:d2:9b:8d:80:0f:ca:93:3c:d9:a9:75:84:6d:ba:c3:1d:
         8b:6d:ce:56:98:b4:fa:82:87:d6:15:2a:47:9b:a4:c9:66:fa:
         69:18:c8:51:d0:e7:1d:3b:14:d8:ed:c5:29:51:bd:b7:dc:ee:
         15:e4:a5:55:5b:46:5a:03:8a:7e:92:78:9a:fd:85:7f:4d:84:
         fd:6f:ac:91:c0:19:fc:3a:84:1e:0a:b1:06:1d:11:db:97:39:
         b5:ab:a6:ef:b0:27:4d:13:62:68:ad:87:41:1e:cb:ca:f7:b5:
         06:6f:67:7a:c8:9c:80:80:09:d4:78:2f:e1:54:97:ff:06:23:
         cf:e1:57:d4:04:96:73:13:49:f6:36:50:f4:21:f3:66:59:a2:
         94:2e:37:a7:a0:37:d5:74:c7:38:b1:f9:26:7d:2f:8d:36:8a:
         f9:6b:3a:72:2e:07:b6:dd:48:22:18:2f:4d:5f:04:17:0f:bf:
         e4:10:03:56:86:81:43:29:73:32:00:34:1f:29:bd:03:5c:0e:
         aa:4a:26:ac:36:cb:cc:30:1f:63:d6:d0:80:8f:59:91:40:ac:
         b0:89:b6:a2:e5:13:ea:ea:50:6d:d8:f6:15:08:13:39:ca:b0:
         20:c4:1d:1e:d0:0a:f5:c6:d6:05:15:d6:f3:cf:e6:1f:46:48:
         03:92:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:21 2026 by rpki-client