Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/712a800f-4dfd-387f-a7e1-7c0675dadc16.roa
File:                     712a800f-4dfd-387f-a7e1-7c0675dadc16.roa (raw, json)
Hash identifier:          /1Oy6cv50lox39hn7Oghoze5ytmmy90+SRsLhJFlEUE=
Subject key identifier:   36:09:CE:6E:4F:89:42:F5:27:BD:1D:A5:9C:AE:DB:EE:15:B5:67:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E683F5DB65AD8C47C91F813A7
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/712a800f-4dfd-387f-a7e1-7c0675dadc16.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     396599
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:5d:b6:5a:d8:c4:7c:91:f8:13:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=425c0289-e8f0-498c-a7b9-d89f07bcf6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:3b:33:53:f4:ee:36:1b:9b:c7:9c:5f:93:
                    b5:a1:db:cf:fc:81:3e:12:bb:6a:c6:07:fe:63:b6:
                    a4:ed:1d:e6:85:c2:93:17:01:7c:9a:55:cd:3d:dd:
                    e8:b8:71:69:41:d3:9b:d9:ef:58:a0:f3:ae:02:af:
                    7a:d3:40:d0:6f:43:ac:e5:f8:c6:09:a0:0c:62:e8:
                    03:ce:b6:44:1a:ba:b1:59:b3:b7:e4:28:83:6f:3a:
                    0c:5f:5a:f6:e2:c5:5c:c5:c5:f9:4d:d5:34:ad:a3:
                    9d:5e:00:ba:ba:47:ba:55:65:a8:c9:f6:a2:5b:b4:
                    bd:26:b0:8b:93:6a:fa:41:1e:d2:45:5f:30:21:66:
                    2b:96:cf:78:fc:d8:75:4d:15:df:e9:ba:08:19:10:
                    4a:5b:e2:25:40:7d:e1:a8:d9:b2:6f:97:89:09:ea:
                    6d:a8:04:b0:da:71:0f:44:fb:d3:34:c1:dc:fc:66:
                    31:d4:40:e0:4e:a5:ea:4c:7b:25:e5:4f:6c:24:44:
                    30:1c:f7:c0:6c:7a:2b:f3:5a:d1:ba:a5:9b:9b:9f:
                    06:ef:b6:e5:e0:99:17:94:ae:75:85:f8:41:02:b3:
                    66:14:5e:c0:a3:df:76:c1:4a:3d:38:81:2a:80:27:
                    7c:aa:96:54:ff:7a:f7:b4:55:2e:34:39:6e:ee:89:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:09:CE:6E:4F:89:42:F5:27:BD:1D:A5:9C:AE:DB:EE:15:B5:67:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/712a800f-4dfd-387f-a7e1-7c0675dadc16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ce:0a:48:fb:5c:83:ef:f9:7a:89:0e:0f:76:30:e9:e9:1a:
         2f:a4:1c:84:49:b3:40:62:41:d6:0a:3a:60:cb:1e:08:75:34:
         e4:e0:37:3e:64:3e:83:a6:1e:49:aa:0a:4b:13:4e:b8:58:9b:
         46:9c:a4:ec:ec:0a:af:73:6c:66:0b:ef:e4:3f:80:d1:bf:f2:
         23:a1:33:5c:2c:3d:3d:87:37:09:ff:9f:c9:04:a7:c4:c0:a7:
         0a:2a:70:ba:05:c8:e4:84:11:bc:35:cb:54:77:ad:65:a7:e2:
         27:7e:9f:fe:e6:a9:9d:f8:d3:0a:45:52:f3:1c:87:e2:79:0e:
         1a:2a:b2:f3:2c:aa:78:40:29:b9:3d:9d:0a:f2:14:89:81:84:
         98:8b:74:87:3c:85:39:4d:28:35:6a:1c:2e:5d:55:ff:14:45:
         d4:01:38:46:29:2a:4d:7c:9e:4f:38:de:6b:a2:a4:34:a5:68:
         45:7f:2a:5a:b5:ea:52:86:22:5a:4f:0a:b1:09:e3:ca:89:22:
         fb:c7:bd:d9:13:7e:01:af:f9:89:7c:14:e7:64:2d:63:1f:2e:
         d5:f7:c6:83:fd:e9:81:d3:64:b1:7e:56:54:08:75:28:f3:93:
         be:70:cc:c0:ac:42:61:49:fb:35:0d:60:a2:19:b6:48:b4:5a:
         79:04:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:35:44 2026 by rpki-client