Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35730d27-8c31-3e82-acf7-00124871570b.roa
File:                     35730d27-8c31-3e82-acf7-00124871570b.roa (raw, json)
Hash identifier:          9GUgNefU2yBQUqC+0s7xm1xO+3xIYEzhucKLCcQCNJs=
Subject key identifier:   9F:2C:20:06:CB:64:36:DA:1C:EE:CE:55:74:E9:72:0C:41:00:FE:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FAEED80D4E70B3E044180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35730d27-8c31-3e82-acf7-00124871570b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396562
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:ae:ed:80:d4:e7:0b:3e:04:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=3f2fa894-e109-4fd2-afc4-ee9dd84c2bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:b4:48:2c:3a:cb:eb:9d:d1:6d:64:1e:32:
                    7f:a1:2e:9a:12:29:f6:29:81:22:13:0c:0b:4f:c1:
                    03:04:cd:cd:3c:57:86:b2:2d:b0:60:08:95:74:69:
                    dd:8e:fd:45:c6:f6:bd:19:b8:32:f8:92:24:d5:05:
                    fa:e2:27:68:f7:d5:b1:19:7e:2f:fc:cd:16:6d:0e:
                    e4:77:07:46:be:ca:78:59:e5:78:2d:6a:6d:0b:09:
                    5b:6d:08:46:2c:e1:7b:e8:4d:11:71:ab:6e:5c:6b:
                    31:02:d8:46:a3:da:bd:46:21:ce:a3:7f:24:37:4e:
                    cf:13:a8:0f:42:09:dc:b4:07:83:6d:7c:c5:30:7e:
                    f5:69:24:6e:2a:30:77:7c:b4:7f:b2:db:59:2e:3c:
                    d7:b1:71:56:b3:2c:7f:9c:dd:87:b3:06:03:d6:b6:
                    75:6e:59:b7:eb:8b:9c:3b:c4:6d:b5:f9:be:39:82:
                    db:96:61:d2:7f:94:9a:c2:37:57:8f:6a:27:52:e4:
                    73:8f:e6:98:7b:1a:4f:25:2d:7b:fd:6c:88:9e:51:
                    bb:d6:ee:ee:2f:c6:7d:4f:61:2b:58:da:99:81:23:
                    56:e3:7a:76:de:7d:f6:70:d3:34:0e:b5:a5:99:d7:
                    42:89:2a:0a:61:a5:f5:1e:2f:6b:44:b3:10:c9:12:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2C:20:06:CB:64:36:DA:1C:EE:CE:55:74:E9:72:0C:41:00:FE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35730d27-8c31-3e82-acf7-00124871570b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:85:f3:82:dc:1c:67:90:b1:83:e3:cd:b8:dd:b2:c7:13:b2:
         1f:81:03:b2:c9:d0:ad:4b:e5:c0:ca:e2:a2:04:a1:00:04:25:
         8f:c2:8c:65:8b:cf:43:f0:e2:13:bd:a2:b9:e9:72:32:7f:c3:
         ad:5f:ac:00:08:e2:b0:3d:d6:5e:2e:1e:1c:9c:59:32:82:92:
         31:d8:82:06:6d:ce:f1:ff:16:63:f2:a0:a0:57:da:cc:e8:32:
         43:da:e9:e4:23:9c:17:b0:ff:3b:e7:46:4e:d7:4b:66:2d:97:
         45:54:34:06:bd:37:29:7d:98:46:dd:ba:10:db:54:83:4f:95:
         a1:c9:0b:47:14:b5:56:b8:36:32:94:d1:5d:cc:19:f1:dd:04:
         30:f5:ba:52:86:53:62:83:ed:ca:dc:d4:7f:01:4b:aa:df:24:
         b0:7c:f1:5b:62:4e:24:e4:ea:1c:84:06:64:68:53:7c:7e:f1:
         00:da:48:16:30:53:15:f9:75:a5:62:59:bd:2b:a4:83:a8:1b:
         cd:0e:41:e7:96:60:a7:3c:4e:49:33:79:0f:b0:fd:7b:37:6a:
         c8:8b:79:5d:83:6a:f4:bd:e2:ab:cf:fe:43:03:a6:ef:e3:82:
         df:44:bb:32:3d:a8:59:52:57:d5:2b:3f:b3:3f:b3:d6:b7:3f:
         ae:64:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:54:39 2026 by rpki-client