Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd2b561-9c6a-3027-9c2a-a7e6ad647e6c.roa
File:                     5cd2b561-9c6a-3027-9c2a-a7e6ad647e6c.roa (raw, json)
Hash identifier:          07KG3+3KJcHyjnsMvPq6pxeT7Usf4A5RnVNK+yyWtfg=
Subject key identifier:   27:0A:AD:C4:97:DB:92:5D:EC:0C:4D:0E:27:DE:73:63:63:42:6D:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4C4D65855FDF66F724DB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd2b561-9c6a-3027-9c2a-a7e6ad647e6c.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     397195
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c4:d6:58:55:fd:f6:6f:72:4d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=c767b82f-dbe0-4774-b0d0-c72de3d3b638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a5:d3:1d:1f:88:2b:ba:f0:ab:41:11:f5:d7:
                    a7:4f:d7:0c:c0:52:8b:22:2e:db:6b:a5:96:f7:d8:
                    fd:a0:e3:30:dc:55:25:78:db:16:0d:5a:a6:3f:0c:
                    19:be:fa:90:36:8f:42:69:cd:72:ea:37:b8:08:97:
                    04:c9:43:4a:0b:73:f4:32:bd:22:69:7f:17:59:93:
                    40:98:d0:18:42:d1:40:6c:54:30:f1:0b:62:f0:5b:
                    dc:e1:ef:19:be:0d:cf:d9:79:b6:80:54:ec:ec:7d:
                    59:b5:48:2c:f4:2b:8a:d0:ac:fa:03:25:16:a3:88:
                    c0:2e:05:2e:f6:9b:96:00:18:8c:aa:23:0a:ea:62:
                    88:a5:8a:ee:c4:c3:03:7a:28:71:d3:8a:73:19:78:
                    97:6a:27:fc:97:1b:8d:b3:e9:d9:e6:55:52:c3:b9:
                    3f:37:3a:ad:35:d9:e5:b4:4d:d8:e1:4e:bc:bd:4f:
                    1e:0d:25:da:7b:30:d9:28:29:73:a9:5c:f6:9d:65:
                    11:25:b9:82:30:16:1e:2e:2c:47:f7:8f:a2:f5:f2:
                    e5:18:45:19:5a:37:32:33:13:03:92:94:dc:f8:dc:
                    88:cb:df:5a:0c:5d:fa:7a:c9:ad:1e:e1:97:cc:13:
                    c4:3b:f6:23:56:bd:ef:79:73:3e:7f:3b:d3:40:e7:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0A:AD:C4:97:DB:92:5D:EC:0C:4D:0E:27:DE:73:63:63:42:6D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd2b561-9c6a-3027-9c2a-a7e6ad647e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:53:54:52:34:c3:d4:23:6a:16:08:a4:b9:d3:35:c1:ed:fa:
         55:e5:45:56:57:ed:70:f0:01:69:b8:9f:14:2a:34:d4:3f:18:
         ab:30:c0:06:f8:79:5c:a9:43:a5:16:a2:1e:f5:01:10:13:1b:
         51:4a:dd:44:16:91:01:7d:12:c8:07:6c:6b:1b:b9:e0:0e:f7:
         97:f3:9b:cc:cf:6c:c0:d0:ba:57:50:6d:da:19:a2:94:08:c0:
         99:70:2d:ea:03:26:1a:db:53:5e:1e:00:15:c1:ae:81:f5:02:
         1a:0a:a9:f9:0c:aa:16:41:82:5d:97:bf:85:17:27:1c:72:ed:
         5a:8b:9c:05:40:1f:00:93:40:9b:24:76:83:43:e9:77:55:8f:
         2c:cb:19:0e:b8:77:21:b2:b0:84:7a:d2:92:75:28:89:bd:3f:
         54:c4:92:cb:4e:11:ea:f3:4e:7c:a0:b5:df:0d:17:60:7a:55:
         71:7a:d0:8a:4f:54:ef:24:1b:d2:c5:74:f2:e3:61:20:b6:a6:
         81:65:2d:2f:a1:2d:69:ea:13:6d:1d:6f:42:00:ba:81:36:1e:
         b4:de:d4:60:9f:fb:af:3d:2c:fd:10:65:8d:2a:38:14:2a:90:
         9d:29:62:a3:57:67:53:09:35:db:32:76:84:bc:b3:60:6f:3d:
         3a:cf:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:23 2026 by rpki-client