Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aa1d615-fb42-3a3d-bc57-c129ff0735bd.roa
File:                     6aa1d615-fb42-3a3d-bc57-c129ff0735bd.roa (raw, json)
Hash identifier:          2JKr6RmksbyyxZgYW5ha2qsKEV0om1bG0STX6tm9jGA=
Subject key identifier:   41:6E:95:CD:D1:E9:89:9A:29:51:4D:C1:F2:3D:8C:52:CA:5A:42:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5A4A17B99833D8491A86F080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aa1d615-fb42-3a3d-bc57-c129ff0735bd.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     396546
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:17:b9:98:33:d8:49:1a:86:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=8803e045-46fc-423c-be76-2171479c4988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:aa:3b:2e:e9:a0:2f:8a:29:60:f9:a4:5e:
                    6b:13:17:4c:34:4d:bf:8b:a5:fb:7a:fc:3f:52:68:
                    e9:b5:67:8d:08:fe:3e:a8:bc:09:33:1d:49:93:23:
                    7d:b2:b5:6d:bc:d3:e9:28:d9:fe:0f:3a:dc:52:5c:
                    a0:73:a2:d7:98:c1:78:bf:84:74:ac:7b:95:a6:8d:
                    18:05:0c:e5:0b:5c:67:10:9a:3a:4b:da:a2:98:99:
                    f7:a7:f0:de:d8:16:d2:27:76:5b:1d:35:d4:da:71:
                    bc:e0:2e:03:ff:a4:a5:5b:9d:14:55:7c:fd:79:02:
                    8d:c1:9c:08:36:06:0c:6d:d4:a4:7c:97:ef:a2:cd:
                    3b:4f:85:6e:d1:9f:01:ab:37:35:62:05:95:e1:c8:
                    5a:cc:e3:84:2b:f5:6c:91:83:5a:76:3b:51:1a:03:
                    34:15:fa:4c:c4:c5:22:20:d5:b1:50:04:dc:c3:93:
                    df:ce:40:0e:8f:45:1e:d0:b3:a3:7e:67:e3:a9:41:
                    53:36:ba:81:d1:4f:26:39:a1:7c:be:34:8d:7b:5a:
                    1e:3d:0a:60:b5:75:6f:07:cf:b5:8f:ae:c3:16:08:
                    6d:1d:4d:b5:1f:21:07:9b:cc:c6:82:7a:ac:ef:d6:
                    78:4f:d1:d8:9a:77:40:88:51:05:21:9e:aa:8e:91:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:95:CD:D1:E9:89:9A:29:51:4D:C1:F2:3D:8C:52:CA:5A:42:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aa1d615-fb42-3a3d-bc57-c129ff0735bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:52:5d:33:46:f8:08:10:8c:2d:86:c9:4e:4d:01:3e:a1:05:
         58:f2:63:2c:16:1b:73:e9:1f:53:88:72:7d:32:ee:50:b9:d7:
         55:f5:f3:17:90:1d:03:d1:dc:b2:ad:6e:70:3d:0c:c0:44:c5:
         be:b5:ed:6e:e5:67:12:94:f9:51:f2:91:56:31:b1:fd:1c:26:
         29:12:10:af:8b:a7:94:c5:ec:36:eb:87:31:2c:6d:42:fd:49:
         10:90:8c:28:b3:43:b0:8c:a1:ed:f1:94:2f:39:f1:25:a5:be:
         9e:f7:27:49:9e:2a:38:2f:20:91:01:b3:2f:b2:59:66:52:e1:
         16:09:62:ce:7f:d2:43:ea:72:1e:63:83:a0:e9:4f:3d:b7:ef:
         21:11:5e:f2:b2:0f:98:67:b1:26:01:12:bc:32:ba:e6:59:a1:
         db:fd:58:b3:a6:2a:c7:ff:35:b7:e5:9c:d5:b9:fb:d2:25:dc:
         6c:5c:e2:24:5c:69:9f:60:4d:52:53:78:df:90:5c:10:c1:b8:
         9c:a5:dc:a2:d9:10:15:24:e1:a4:15:fc:fa:a4:f8:d7:de:62:
         e9:64:82:39:69:80:59:56:72:e0:12:28:3f:22:a2:1d:fe:54:
         97:84:b5:21:cd:f6:ae:73:16:7e:95:d5:9e:fa:5c:b4:1a:37:
         f5:b1:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:53 2026 by rpki-client