Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa
File:                     428457c7-ce61-3c36-8bbe-586d416386c9.roa (raw, json)
Hash identifier:          kipptIJtv8kxxj/rPRwfuJB7iBQro9GxI6sWroz356U=
Subject key identifier:   68:8C:E9:9E:59:01:8B:58:52:AD:E1:13:DC:2C:FE:6B:B4:5B:25:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6C6F6F3D683D7C528F95CC60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     27544
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:6f:3d:68:3d:7c:52:8f:95:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=e157d99f-1b46-42cd-a0af-f2a2fc20cdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:e3:5b:d2:1c:11:27:f7:9b:cc:e5:ba:61:
                    d3:23:6a:b8:19:04:da:3a:71:82:a3:3f:f1:f6:6e:
                    46:93:62:75:bb:66:1d:ac:ad:33:6b:65:23:ba:9c:
                    09:84:f8:5a:93:cd:4c:52:66:24:4f:3c:4d:fa:19:
                    ce:35:d2:ab:04:98:2f:ed:d8:89:97:35:56:dc:a5:
                    9b:e6:05:0a:bb:c9:e0:2c:ab:83:25:2c:e8:fc:d9:
                    05:b6:0f:03:19:d8:ea:eb:bf:21:6f:ac:ef:68:dd:
                    57:da:7a:a6:f3:d2:1e:21:d8:b5:00:cd:e9:72:b2:
                    af:71:eb:12:82:c2:50:2b:50:ed:d1:b1:69:85:59:
                    05:4e:76:1a:bb:82:e5:90:9e:20:b2:8b:a7:99:dd:
                    54:d4:2f:29:14:42:f5:1e:a0:aa:14:c6:01:53:a5:
                    65:e8:56:47:32:39:be:a9:8d:eb:ce:b6:7d:2c:fa:
                    21:a6:e2:a7:ad:5a:f3:98:eb:25:d2:86:cf:81:28:
                    7e:9b:41:88:3c:c7:04:b3:82:d2:33:ff:7e:52:db:
                    27:18:25:48:ce:9c:f0:88:74:83:65:fa:ef:22:ae:
                    ff:22:a8:95:91:59:93:f1:bb:fe:ca:00:8a:73:51:
                    9e:c3:44:02:2d:fa:a2:6e:3e:63:41:8d:96:d8:40:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8C:E9:9E:59:01:8B:58:52:AD:E1:13:DC:2C:FE:6B:B4:5B:25:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1c:bd:af:14:6d:7b:ac:21:8e:cf:9f:db:af:c5:0f:56:0b:
         2e:0e:aa:ec:34:b2:90:7f:fc:8b:00:72:4e:5d:f8:c0:b8:59:
         91:15:89:8d:ed:b5:7e:9c:26:18:01:d6:e3:cd:20:50:86:aa:
         34:1c:60:2d:ff:e0:93:96:e0:be:8e:f5:f2:f9:d5:8e:3e:33:
         d4:8c:df:8e:5f:26:2f:6c:4a:5a:03:49:4b:b4:7b:7f:b8:24:
         6e:60:33:ca:95:66:cc:52:9f:94:6c:b4:cf:f5:ae:51:7c:8f:
         81:d1:cd:98:3e:63:7a:69:27:db:d6:3b:df:22:91:8b:8f:cf:
         7e:19:0e:e7:9d:3a:d0:d0:c0:13:76:72:0e:25:98:ca:2c:a8:
         8b:45:43:93:be:6d:92:c6:51:30:3e:c6:24:49:e5:55:35:b2:
         ac:7d:3e:76:d1:09:a7:48:e4:ba:5d:21:8f:04:3d:b8:49:a2:
         92:e1:aa:9c:3d:3b:30:d4:76:17:97:fb:23:fa:c2:68:aa:04:
         fe:8b:d3:29:86:db:0a:c9:f2:84:56:7a:54:b9:26:b7:c1:40:
         f3:72:ba:7c:ac:16:00:97:d9:13:01:4b:01:8d:4d:ff:df:60:
         23:38:33:9b:1d:5c:72:10:00:cb:c8:27:d5:22:51:e7:14:a5:
         09:5c:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:01 2026 by rpki-client