Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ce87737-1634-3203-a824-d6d460f82b01.roa
File:                     3ce87737-1634-3203-a824-d6d460f82b01.roa (raw, json)
Hash identifier:          k6CwagGqHLA6Wdv3RYyHrt70dmJhTvqKR+1Ycio/H3k=
Subject key identifier:   45:B2:C3:4C:16:A7:FF:79:FA:F5:66:AA:72:FB:CF:4E:10:97:1D:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA4980DCAFC2CB32D6F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ce87737-1634-3203-a824-d6d460f82b01.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     397199
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a4:98:0d:ca:fc:2c:b3:2d:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=82474d7c-a3a9-4186-9668-fa8a70e4c064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:5d:23:2e:45:95:b6:7a:0d:d5:8d:c0:b4:
                    dc:fe:a8:0a:51:32:d6:bb:5a:3f:52:70:c3:fd:ce:
                    69:fd:3f:3c:74:d0:be:81:dd:6c:ea:10:3c:ff:48:
                    99:00:bf:b7:59:61:ce:3a:f2:ce:85:42:3e:be:39:
                    bc:87:a5:fc:c5:fe:61:aa:e1:18:5b:52:7c:b8:c0:
                    f8:d0:15:89:9d:e1:a4:c8:fd:c9:fd:c2:cc:1b:20:
                    65:94:0a:95:0f:86:b7:d8:1d:62:3e:10:86:f0:c8:
                    f3:28:30:e5:13:f6:3d:e0:28:8a:ca:b6:45:84:06:
                    8a:9f:9d:93:63:3a:0e:41:94:86:49:e3:6d:31:62:
                    8a:93:8a:24:7f:43:ed:10:67:72:2d:20:ec:eb:14:
                    91:a2:cd:44:d8:9c:77:21:af:2d:e6:57:05:87:21:
                    f7:4e:fe:94:95:07:c8:8d:00:3e:e6:1c:d1:18:0f:
                    40:b3:70:78:90:4c:47:23:1b:40:7e:42:5c:4e:35:
                    f3:a4:18:96:6a:33:62:e9:99:29:a1:2e:8c:a8:50:
                    04:8a:59:43:d7:b5:85:21:72:16:bf:01:e8:bb:f3:
                    63:e6:b0:16:d6:86:96:45:14:a6:c9:3d:0d:d8:eb:
                    3f:ac:69:bc:78:2c:91:cb:a0:84:f4:c2:ad:23:94:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B2:C3:4C:16:A7:FF:79:FA:F5:66:AA:72:FB:CF:4E:10:97:1D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ce87737-1634-3203-a824-d6d460f82b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:69:e7:0c:79:03:cc:70:f0:4a:f5:b5:f6:06:bc:54:1d:80:
         1b:3b:23:f6:fe:f5:05:cd:09:6b:79:f0:07:b9:f0:96:d5:28:
         ab:35:ea:62:49:2b:7a:08:64:b1:28:0f:2a:4e:bd:fe:52:15:
         f3:bd:82:5b:4a:88:94:7d:0b:cd:78:f0:70:a9:04:a2:4a:81:
         e4:5e:1c:c5:1d:38:27:05:c4:2e:9d:a7:56:42:73:ae:ef:f9:
         e4:72:d2:bf:c5:2e:38:81:98:85:14:c6:67:5f:f3:de:e5:6c:
         a2:e4:a8:92:15:b1:5c:8c:d9:be:16:cb:b6:10:1b:80:49:70:
         da:c5:f1:61:08:77:61:d7:7a:d5:10:8f:3d:0d:12:fe:18:d0:
         37:77:54:23:dd:b2:70:51:95:78:62:7c:77:11:0d:16:ee:da:
         2b:12:b3:48:e9:fc:d8:e7:07:b6:fd:bb:68:86:f8:9e:1f:57:
         c1:61:91:80:85:3f:da:f6:1f:64:92:eb:98:52:62:3b:29:52:
         c6:8e:65:28:07:ec:ab:ff:e4:2f:41:83:ce:4f:a1:29:e1:46:
         74:01:70:ab:98:9a:4a:ff:22:a6:5f:e6:90:9b:86:88:b6:b3:
         85:5e:93:63:40:b9:c0:28:e9:fa:b3:1c:d7:d6:df:83:a0:64:
         d2:b9:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:55 2026 by rpki-client