Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3213d982-8960-312b-8508-7c0a21e62a7d.roa
File:                     3213d982-8960-312b-8508-7c0a21e62a7d.roa (raw, json)
Hash identifier:          OUt6ZzXVMpuAM7A1zU5F7wdtTDpAYsFOn/FNZ2FmUx0=
Subject key identifier:   9F:F6:4A:09:F8:4E:7F:AA:E4:D7:BB:D6:78:A4:11:C1:E2:E3:29:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FBC231C3CA69191C4B2F8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3213d982-8960-312b-8508-7c0a21e62a7d.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     397212
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:bc:23:1c:3c:a6:91:91:c4:b2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=cfcb2a64-a41b-4c8c-8ea7-6e9820cfe87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7a:44:85:3e:76:2b:12:8e:86:08:75:15:42:
                    6a:fe:ca:0f:e9:f4:2d:73:1a:2e:c0:66:51:a6:4e:
                    54:c3:2f:15:7d:2d:00:0e:25:e1:61:c3:1a:5f:38:
                    36:fc:f6:c4:95:12:69:59:4f:c2:c6:e6:f2:9f:92:
                    f2:69:4d:2c:6c:bc:b6:f3:38:67:e7:e0:12:71:30:
                    d1:36:a6:1c:4a:de:6b:e8:4b:76:8e:20:cd:7c:79:
                    6d:33:07:12:15:a6:59:68:9b:b0:6e:09:a5:ed:fe:
                    a2:f0:92:87:d6:f3:10:55:43:37:e8:37:ea:2c:c6:
                    12:51:47:b2:49:c1:7a:5b:48:9c:84:5c:74:2b:e5:
                    ab:6b:f7:a8:b6:04:88:19:aa:d4:3a:c0:73:bd:f9:
                    f0:65:08:00:8f:4c:2e:8b:0b:ac:bf:27:d6:22:8d:
                    41:73:76:e8:ac:0f:55:c1:43:68:14:c0:d4:5b:16:
                    2f:65:0a:8b:35:0c:56:ea:25:11:e5:c9:21:d6:ca:
                    ca:a9:21:b5:e2:32:3a:e4:4b:ba:2c:c3:1b:d7:82:
                    e0:08:45:0f:01:cc:d4:20:c6:0a:8d:7d:20:77:fa:
                    ed:12:b1:8c:db:b1:49:00:d7:b2:08:6e:d1:9e:12:
                    79:69:58:bd:e6:a8:68:a0:19:e5:16:bc:68:cf:66:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F6:4A:09:F8:4E:7F:AA:E4:D7:BB:D6:78:A4:11:C1:E2:E3:29:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3213d982-8960-312b-8508-7c0a21e62a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:db:28:87:97:4b:96:00:6c:8b:0c:ff:09:5c:7b:f1:78:c9:
         98:1e:10:de:c2:da:08:59:44:e9:c0:8e:8b:9f:d0:51:a6:79:
         f4:e7:9a:58:6f:5e:35:7c:f3:0d:b3:c2:89:f0:dc:4d:c2:12:
         64:9b:ab:10:ba:a3:5a:5a:45:be:35:f8:5b:f8:a1:98:36:c1:
         e7:e2:87:3f:82:3e:8a:3d:a9:84:53:08:59:e1:c5:b9:a6:00:
         6f:4b:c2:3a:77:67:0e:8b:8a:d7:69:4e:3c:3c:22:d8:da:fa:
         77:3c:ee:1c:b5:cc:50:ee:cf:83:95:ef:1d:b4:b3:e7:fe:a5:
         33:0c:31:56:a6:f7:c5:7c:8e:44:cc:f4:e1:30:12:9f:ce:4c:
         ff:6c:53:78:c2:53:df:25:1b:d1:a9:5c:cc:53:fd:22:50:3f:
         f3:5f:22:6a:a3:00:2e:a5:c6:50:58:e2:bf:4b:31:e6:7f:93:
         29:fa:4f:37:d0:10:ab:7b:5d:bd:24:af:49:c1:5a:f8:ee:16:
         e2:ab:d2:47:05:16:70:41:4f:e9:b4:f0:60:ba:a4:57:63:25:
         13:6d:70:fa:97:7b:52:9e:07:8c:5b:cf:a4:45:26:6b:f0:13:
         bf:b0:88:e6:20:08:e8:e8:26:5b:5e:a0:3b:f5:49:e8:79:9f:
         bd:e5:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:20 2026 by rpki-client