Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa
File:                     3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa (raw, json)
Hash identifier:          Hq8+C7BeNwevhfaPL7o3yom4lDujHspOi3Uj9P+L2sI=
Subject key identifier:   02:45:A9:91:D7:39:BB:37:8E:D5:2F:24:A4:CD:E1:73:B2:A6:91:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB4DEA7BCF7AB74EC5E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     397197
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b4:de:a7:bc:f7:ab:74:ec:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=54623db2-1cd2-49fd-a414-e8b8883c3e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:60:5c:ec:70:b1:27:10:02:bd:3f:3f:5f:09:
                    97:99:7b:fc:b2:d4:e8:40:25:ba:a6:dc:ba:d8:fa:
                    1f:cc:a9:e0:e6:fb:9e:6e:10:2b:f9:70:30:50:0f:
                    48:3d:58:1f:c6:ea:8a:65:37:3c:84:0e:bc:bc:cf:
                    18:45:71:45:4d:6d:14:a2:50:fc:bd:8f:60:3d:e6:
                    09:77:26:06:af:bd:12:fa:86:bc:26:33:98:50:d7:
                    94:b2:9a:76:fa:33:69:c2:34:b1:87:8a:55:32:b6:
                    17:7c:b5:4f:5e:05:bb:ec:ab:87:61:7e:e1:4d:ba:
                    5d:03:91:84:4a:2e:0c:e7:8d:58:b4:04:ce:4d:de:
                    0b:06:a8:e0:3a:12:2f:82:af:ab:9b:de:7e:48:23:
                    6d:75:e3:03:96:20:a8:71:ce:a4:91:79:dd:a2:1e:
                    d0:26:ea:f7:71:8d:52:f9:dc:47:89:db:ef:9c:9e:
                    c0:16:ca:ba:80:f8:cc:60:2c:4f:ab:a8:9f:7d:ec:
                    f8:d2:68:2e:44:11:d6:29:e6:a4:02:75:63:69:e5:
                    52:56:80:16:1c:79:56:c0:46:aa:d9:99:cb:f1:62:
                    e6:cf:20:de:18:16:95:d0:ec:b9:9b:82:10:ee:1f:
                    f3:84:99:63:f8:ed:9e:6d:fe:3e:b4:df:10:c2:03:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:45:A9:91:D7:39:BB:37:8E:D5:2F:24:A4:CD:E1:73:B2:A6:91:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:49:3b:1a:f3:4c:e4:0a:97:56:42:02:9b:b6:c1:dd:ea:01:
         cf:06:e7:84:4c:36:3d:de:4f:e0:ba:5a:12:c3:de:7e:77:05:
         17:bd:0e:fe:6f:08:eb:b8:5e:6b:d2:ad:3c:dc:61:cc:36:9c:
         9f:ed:ba:99:07:ae:bc:94:47:1b:b5:70:5c:69:72:2a:9c:09:
         cb:99:38:73:72:d8:e7:73:89:b5:ef:b4:1c:b7:f9:d9:c1:e0:
         7b:be:b8:09:4b:46:4a:dc:ff:95:c6:87:c1:35:f4:a5:9d:a1:
         20:ba:90:49:01:12:3d:c5:e3:53:4d:a9:e3:53:1e:bd:3e:20:
         06:8d:b4:11:74:a4:e3:4b:3f:39:3b:cb:8d:88:e0:2f:c7:bf:
         2d:79:59:d0:33:f0:27:3c:99:12:f0:a2:94:48:15:fc:5f:6a:
         3d:e6:51:d1:d6:3a:1b:f3:f0:bb:0e:47:35:ee:98:e5:8c:a3:
         84:9c:84:bc:fc:1c:b7:87:e0:50:4e:be:78:db:2c:af:37:1c:
         23:8f:50:ab:68:60:fa:9d:e2:87:f5:d0:c9:b5:9d:36:80:50:
         2b:33:c3:f4:84:df:26:58:40:35:d8:f2:e0:4e:60:72:80:d9:
         23:fe:40:78:a3:5e:be:d7:9d:3c:a6:e8:6f:11:7a:78:52:54:
         4b:47:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:03:58 2026 by rpki-client