Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa
File:                     30406605-4c67-37ce-aa10-4258fa27d89b.roa (raw, json)
Hash identifier:          2A5+Js7yRsLyxJ/cY5Vd32VGWe0UTDzgkkMIDJ0tr3I=
Subject key identifier:   27:0A:61:27:27:E7:AA:B0:0B:E6:C1:44:48:9D:4A:77:B7:B9:D7:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB996FDCA6A48D6BBC940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396826
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b9:96:fd:ca:6a:48:d6:bb:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=25cb30dc-3a9a-4631-8c27-df52ecb20547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:16:04:6f:cc:8f:d0:36:04:17:e1:4b:93:
                    34:af:61:dc:f7:46:c4:09:96:05:0a:e2:fb:b8:f5:
                    99:dd:84:23:ba:ae:b8:bf:27:7d:e1:7f:b5:15:07:
                    d0:04:3a:7c:84:68:ec:39:f0:75:0a:33:3a:e5:2e:
                    a5:a5:02:8e:2b:8d:f2:5f:d1:12:34:42:d6:c5:ae:
                    1d:c8:70:f5:42:1f:8e:5e:e3:9d:5b:e2:ad:92:fa:
                    dd:fe:70:e4:49:12:d7:4f:e9:05:36:e8:c0:34:01:
                    8a:57:1e:aa:aa:45:c4:8b:fd:95:d1:4f:be:4d:06:
                    6d:8f:76:da:61:f8:50:53:79:65:37:14:91:17:7e:
                    e0:b5:39:60:a4:b9:b7:84:2b:c6:dd:05:c9:3d:ef:
                    90:d2:60:8a:3b:ca:a9:f0:b5:14:b8:00:ed:cf:36:
                    50:e4:1e:e3:e2:6e:d2:bf:bc:ff:28:01:e8:b4:87:
                    12:01:c3:b1:1e:bb:07:65:26:48:d0:6f:fc:c8:bd:
                    be:ee:49:9e:d2:fe:59:28:0f:40:2c:ff:5f:71:9e:
                    dd:fe:5a:85:36:ec:21:10:9f:59:32:ff:9d:79:60:
                    4d:f1:56:e4:7f:6c:82:59:01:9f:51:35:24:15:a4:
                    06:d7:82:ff:51:3b:2d:67:27:35:86:5d:c5:34:23:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0A:61:27:27:E7:AA:B0:0B:E6:C1:44:48:9D:4A:77:B7:B9:D7:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cc:84:90:a9:0f:b0:95:99:e0:36:21:0a:9f:33:c3:27:df:
         1c:0b:c2:58:35:4e:ad:a4:be:0f:fc:8e:ac:2b:87:0a:13:6f:
         ad:f3:c1:fb:98:c0:6b:20:7c:b3:5e:c6:90:10:e5:65:3e:19:
         b5:04:55:c9:93:63:39:15:dc:c1:e8:a2:40:34:d6:3f:48:7d:
         bc:52:ed:4c:c2:cc:37:6c:3c:51:03:ab:c3:3f:90:d6:eb:16:
         e2:6c:a5:57:96:e8:d3:6f:44:93:a3:59:42:0d:3b:76:66:b5:
         b1:cc:3b:26:1f:a0:8f:1a:c5:fc:74:bc:f7:11:ab:9c:30:f6:
         d2:85:a4:7b:9c:2e:4f:7d:c8:74:24:f8:24:3d:26:3e:83:7a:
         69:cd:9d:ee:ca:73:5e:da:02:77:f1:5a:57:50:65:3d:c1:b5:
         ef:05:f7:4a:5d:e0:f9:a8:53:c0:e2:6b:0f:76:45:3e:bf:38:
         be:af:8e:c8:fc:74:20:8d:bb:a8:ce:ec:7e:84:bd:c8:3d:de:
         88:04:32:5f:70:8d:c6:b9:a4:53:f7:de:0d:9e:f2:1b:40:b6:
         2f:72:5c:80:72:30:bf:5d:7c:cc:bd:e2:45:11:d0:75:cd:12:
         41:fe:37:dd:22:83:92:c4:b4:ed:23:1f:10:b4:00:33:93:d4:
         41:de:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:30:07 2026 by rpki-client