Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5236e8b7-1183-335b-8cad-ce01bc84a1a4.roa
File:                     5236e8b7-1183-335b-8cad-ce01bc84a1a4.roa (raw, json)
Hash identifier:          26tSjxHYTKCXr4Ur3j0dyvOjAq7Sv4QVdTyYbm/6O44=
Subject key identifier:   72:35:D0:34:00:A1:9D:D4:73:49:C5:50:D0:68:3B:26:75:5C:1C:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA28F82882E6896436E680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5236e8b7-1183-335b-8cad-ce01bc84a1a4.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     36618
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:28:f8:28:82:e6:89:64:36:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=3e91a161-e6e3-40c5-833c-d04b4e30ef5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:9d:2e:09:3d:c5:14:cf:33:0f:50:41:f9:
                    48:ef:62:14:f8:75:3d:1c:94:ab:fb:f2:ce:47:1b:
                    e1:50:73:c0:be:2b:bd:df:91:20:c5:ea:32:3d:a3:
                    7e:2a:95:b1:d4:31:56:17:d6:54:ba:54:b2:37:23:
                    a9:78:67:8b:6f:a9:98:3e:49:36:66:f2:7e:d0:26:
                    20:48:c7:84:31:93:5b:d6:f6:68:d6:a5:87:01:eb:
                    b9:96:00:ea:a4:f7:c3:4c:4f:48:65:d9:57:c4:ad:
                    b9:b4:15:97:12:f7:a1:3b:73:35:c5:45:18:9c:1c:
                    0b:17:a5:de:64:67:fc:c9:10:bf:e1:7a:56:3b:21:
                    fd:28:35:97:c5:29:84:54:23:a6:c9:22:a0:84:c0:
                    91:a7:78:1a:4a:6e:70:14:64:2a:42:a5:b3:70:42:
                    59:5c:a8:7c:ca:b7:b5:78:38:ff:d7:68:97:c5:6f:
                    c9:8f:a6:43:00:1a:58:33:08:77:34:c0:49:e5:79:
                    d0:c6:33:37:b2:b4:a4:fd:b0:75:5d:3a:41:15:ec:
                    ce:7e:39:f7:37:98:66:2f:a8:87:6d:99:d9:33:41:
                    e3:0b:f9:b9:24:03:a5:f5:62:43:1c:08:09:be:42:
                    7f:b9:f2:5a:24:36:25:16:8c:58:f4:7a:25:da:85:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:D0:34:00:A1:9D:D4:73:49:C5:50:D0:68:3B:26:75:5C:1C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5236e8b7-1183-335b-8cad-ce01bc84a1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2f:d6:83:69:8b:d6:d6:19:51:7e:db:cc:06:f1:c8:12:6d:
         48:86:9b:68:6c:64:76:ac:93:56:58:e5:d0:75:bd:a5:99:bf:
         83:b9:aa:a7:2f:57:ba:d3:a8:a0:6b:4a:e5:a4:b5:a4:1f:b5:
         d2:51:a1:4a:95:af:75:76:6f:44:69:f3:67:66:87:ff:4d:8d:
         82:f0:f2:a5:c7:e7:4c:29:d7:f3:ab:5a:5f:06:72:c5:c8:7b:
         97:e8:c6:28:33:8c:81:c3:d7:aa:c3:99:d9:8b:ce:29:6f:cb:
         8a:d2:f4:d9:ea:07:70:1e:7b:07:d2:60:9a:d5:23:96:9e:8e:
         8e:65:66:a9:3d:64:ee:fa:b8:52:f8:62:f4:50:59:bf:44:37:
         79:9a:3b:28:fe:9d:ad:53:a7:9b:e8:46:e6:e7:91:8f:e4:ec:
         81:8f:ee:d0:6e:b3:25:f3:38:44:17:d0:2f:5d:20:fd:62:3f:
         c1:6b:84:98:bf:c7:7d:6a:c2:60:45:b9:01:be:86:b8:46:60:
         a0:f6:7f:d3:83:9c:ad:90:39:74:82:34:84:db:6d:94:4b:19:
         2f:7c:1e:f6:f1:f0:03:6b:1f:89:26:a3:31:83:b6:e1:e8:f9:
         72:a5:3c:f2:f0:36:ff:14:f6:de:8c:ce:8e:fb:cf:99:28:40:
         ae:41:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:14 2026 by rpki-client