Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/333898a0-78bd-3304-a21a-9cc909768c20.roa
File:                     333898a0-78bd-3304-a21a-9cc909768c20.roa (raw, json)
Hash identifier:          cS4CBY32S56chi4yvuNKwKVMEol9Q5pxD4/4PFbLFTc=
Subject key identifier:   94:F2:4D:C2:38:04:2D:54:E7:85:85:B8:C4:A3:17:AB:32:1B:91:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E683F62412D23E3718D743100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/333898a0-78bd-3304-a21a-9cc909768c20.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     36629
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:62:41:2d:23:e3:71:8d:74:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=13420d01-abde-4865-af5b-cf40eaef752c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:2e:49:35:08:00:63:df:db:3a:83:39:39:
                    39:cc:4f:ed:76:51:88:b6:49:33:40:b4:1b:c5:fa:
                    fa:b5:94:36:83:a5:53:c3:bd:ed:5e:53:1b:fe:84:
                    a4:7a:59:c2:3f:81:94:2d:b2:0e:04:18:45:7a:ff:
                    09:fb:65:b9:4a:aa:a6:8c:fb:95:2e:f7:d7:97:e7:
                    42:d8:1e:76:40:3d:40:06:9e:bb:cc:55:31:1f:0e:
                    dc:50:1a:4a:9f:27:23:76:6f:b5:1b:76:5f:c7:43:
                    9f:1c:6e:b0:4d:56:ef:16:34:f5:46:1a:41:46:53:
                    b4:a0:60:f5:17:82:35:2f:c4:4b:1d:99:d8:91:52:
                    34:c7:4c:92:f0:4f:7d:b9:54:32:0a:1e:74:09:26:
                    9f:71:de:28:56:89:ca:29:08:74:ce:3e:7e:ca:7b:
                    7c:26:20:12:cb:07:0a:1c:5a:cc:05:fc:a6:60:ca:
                    53:fb:f1:17:95:99:2f:96:93:0d:10:ad:36:55:c4:
                    02:c3:ed:45:ea:ef:e0:c9:82:73:8b:d3:b6:48:23:
                    2b:3a:6f:28:eb:f5:c1:f5:08:df:18:71:10:aa:78:
                    71:6c:d2:0d:f4:80:27:d6:cc:dd:ec:95:c9:72:4e:
                    e8:9f:3e:c5:d6:de:a3:94:9a:a3:e7:43:0c:10:13:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F2:4D:C2:38:04:2D:54:E7:85:85:B8:C4:A3:17:AB:32:1B:91:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/333898a0-78bd-3304-a21a-9cc909768c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:39:73:a2:d3:c2:7c:57:4a:85:88:7e:c4:19:e5:12:a8:2f:
         61:b8:58:78:61:82:f3:66:d3:97:a7:d9:b6:af:56:d2:d1:11:
         f7:17:48:32:bd:ad:76:b7:79:3e:13:62:ad:96:76:0d:f1:1c:
         ac:0d:3d:17:54:7d:72:96:4b:97:9a:b0:03:4e:6c:a8:48:ff:
         73:f8:bd:20:72:e8:e0:92:5e:97:66:88:65:69:2d:30:65:7e:
         2f:bf:09:45:ad:66:68:86:df:c8:76:f2:73:cb:21:ac:79:54:
         f6:33:10:ef:07:ff:1f:8d:a1:c6:05:c5:1a:c7:75:a1:2e:5f:
         98:32:18:b0:5a:53:a1:1e:97:05:b7:a4:e5:6b:e8:99:70:9e:
         71:ef:68:48:97:39:db:61:a2:39:d5:73:f7:4d:24:ac:d6:5e:
         68:1e:fa:cc:83:c0:fc:d1:d1:66:76:b8:bf:71:0c:6b:3f:fa:
         1c:69:ac:d0:3a:a8:b4:41:e7:c3:82:be:31:78:a5:29:34:c7:
         f9:84:bd:af:a8:1a:7f:de:c6:9e:6b:ec:93:88:ea:63:68:f6:
         52:18:95:5c:3c:45:20:53:1d:f2:c8:50:6b:fb:9b:35:65:94:
         53:ef:f0:a4:91:3c:c2:6d:74:92:18:bc:ab:a6:9d:bf:3b:d1:
         37:dc:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:06 2026 by rpki-client