Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa
File:                     68cf3020-58c7-389f-9be5-7ba3837a00bc.roa (raw, json)
Hash identifier:          /uMA1p4MeOnsu6RQOKBJtvry30ZFnO6Ip2eOb+o0bYQ=
Subject key identifier:   FE:9A:7E:1B:97:31:2C:91:08:0E:11:FA:9A:9A:B1:47:22:9F:6C:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA18D9C78AD4C19CE4E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36624
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a1:8d:9c:78:ad:4c:19:ce:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=b4e355b2-8e0b-418f-8857-fa5cf1e1565c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:de:7b:e2:32:97:be:09:1a:8b:be:2a:1b:
                    18:0a:10:b3:dd:b1:c0:00:27:77:31:30:9e:62:32:
                    11:93:03:26:bd:2e:5f:e9:1f:f5:87:19:d3:9c:ee:
                    24:d0:1c:83:2d:f7:17:09:38:41:77:2c:5d:60:a3:
                    fa:80:b7:7f:71:c8:5b:bf:f5:3d:28:5a:0a:a4:42:
                    51:71:ec:48:09:07:ad:d8:dd:93:b1:2a:4f:c0:4d:
                    eb:bc:a7:92:34:81:f8:eb:e3:64:43:a2:a2:97:1a:
                    ef:28:79:14:53:67:ac:a5:fb:64:96:fb:80:22:9c:
                    7a:86:99:67:8e:e4:ec:cf:d1:ac:24:0b:01:ab:4b:
                    ff:37:f4:8f:5a:10:cc:62:e9:76:95:0d:3a:d6:a9:
                    93:38:fa:13:b4:20:d9:9f:70:19:a5:83:b7:53:ef:
                    b6:df:e1:e5:33:9f:6c:3a:b5:95:da:2c:f8:97:4c:
                    23:df:09:2a:45:03:76:da:2d:e3:4c:ea:46:5e:96:
                    0d:64:ba:d7:8e:52:a3:4c:b9:c4:3f:ca:63:b0:8f:
                    48:39:dc:f1:45:95:b7:ed:78:be:3e:16:ea:64:30:
                    d2:18:11:84:7d:91:43:b3:65:11:79:d4:1e:80:39:
                    d6:ec:d8:b5:00:4e:04:82:77:f7:d1:0c:67:b1:3b:
                    10:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9A:7E:1B:97:31:2C:91:08:0E:11:FA:9A:9A:B1:47:22:9F:6C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:1a:f7:12:77:72:2f:f0:c4:11:52:15:0b:05:97:15:3a:
         b5:cd:3c:55:23:82:7a:8a:1b:a6:f2:7c:1c:57:80:51:b0:9c:
         66:8d:f1:58:42:da:13:fd:9b:07:d8:54:1a:67:54:26:29:40:
         d9:9b:8c:1a:c9:54:54:20:6d:93:e2:75:6f:d7:de:43:7a:61:
         3c:91:1d:39:cc:50:10:fc:9e:6d:25:27:c4:bb:9c:83:5e:f9:
         4c:2b:85:3d:35:61:e5:69:d9:56:93:23:a0:cd:f7:dd:33:b4:
         df:2c:03:db:b6:ee:e0:60:d8:ff:ba:98:dd:2b:61:78:58:c8:
         78:bb:c5:53:ba:2a:52:6b:97:58:70:95:f8:1b:62:dd:89:cf:
         c6:4b:d0:9f:21:e5:70:9e:40:ba:d5:42:44:f2:9f:82:70:0a:
         a3:4f:79:b3:4a:ea:a6:44:2c:38:48:8b:cd:af:a0:f7:ce:20:
         36:7b:81:0d:1b:42:71:fa:57:7a:af:ef:1b:ee:5a:ad:97:ae:
         69:02:15:6e:ff:12:9d:a0:de:c7:b6:37:36:41:5f:4b:75:35:
         7f:05:0e:69:1d:0c:d3:52:ef:f8:3b:b8:f7:8d:bd:a0:4c:9a:
         ec:c6:8f:6d:f6:db:c4:25:f2:59:04:6f:8e:d6:8a:b0:a5:f3:
         15:01:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:37 2026 by rpki-client