Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa
File:                     733aaa0d-8239-3109-af47-430277d59332.roa (raw, json)
Hash identifier:          +4fLaNn3rGyb8vwQMlxuNQTcKpIgme07Y+IwB8Vuoa4=
Subject key identifier:   86:B8:8E:C8:AB:83:B9:78:4C:9D:F8:06:69:61:89:A7:8B:67:90:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6C6F71B23FD62193D8F36DA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     396586
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:71:b2:3f:d6:21:93:d8:f3:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=677f3741-7ac1-43b7-91f3-4483e37db165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:08:52:7a:b8:97:c9:8b:78:40:3a:d9:58:
                    c3:d6:d9:64:d9:4f:13:f2:3c:46:e8:af:e0:f1:38:
                    d7:04:b1:33:40:0e:fa:97:fd:55:c6:5f:38:6f:59:
                    e4:cd:04:a0:cc:be:10:33:8c:a5:2e:3c:cc:7b:64:
                    44:c4:e4:20:93:3b:d5:4a:6c:4b:5b:93:9f:fa:cd:
                    11:3f:1f:d1:a8:dc:be:d8:c0:ac:a0:d4:3b:ef:68:
                    bd:a8:3c:0b:50:cb:98:9b:fa:b5:66:46:dd:44:e7:
                    29:c3:15:7f:52:f8:40:1f:5c:1c:03:94:38:dd:4b:
                    db:69:03:36:1a:2f:a8:a5:cd:5e:a4:ae:a2:ae:b4:
                    18:25:2a:74:ec:68:18:15:a5:6e:c4:79:4d:47:40:
                    3c:a0:45:cf:3f:a2:a5:21:ca:79:cb:90:f7:06:ed:
                    61:7f:31:e1:6b:95:ae:b0:3f:0d:ec:03:9e:25:98:
                    48:87:99:e6:10:73:1d:4b:21:b9:15:66:19:9f:39:
                    f5:59:25:6f:c0:30:3c:9c:1a:ac:a2:17:6f:80:38:
                    1d:f8:e3:9a:19:58:36:95:d8:ef:9c:5c:33:93:e9:
                    c4:11:9e:36:d9:97:dd:60:e3:3f:46:dd:a3:4f:01:
                    bf:f2:ed:d0:e8:87:91:b0:c5:4e:f6:3c:42:d8:c4:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B8:8E:C8:AB:83:B9:78:4C:9D:F8:06:69:61:89:A7:8B:67:90:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:81:46:de:94:f3:26:ec:98:2f:97:0f:17:08:77:8f:49:19:
         1c:b6:e3:8a:6a:ee:b3:2b:63:fc:d3:b2:78:0f:f9:70:b4:25:
         e2:72:2d:2e:d6:84:7c:db:f1:9c:0d:b5:06:3b:e6:14:02:4f:
         8b:bc:66:6f:6f:b5:9e:64:c4:db:32:11:fa:ab:40:61:3e:58:
         b3:80:ee:e6:03:24:1b:af:0a:e5:37:78:aa:94:d5:c3:98:ba:
         2b:f8:58:e6:78:b3:54:69:ee:4b:7a:aa:a5:81:b3:f8:e5:0d:
         eb:60:db:ec:68:77:ba:57:2c:43:c9:d9:ef:41:d0:c1:cb:7b:
         28:c6:a8:a2:cd:5c:bf:f0:be:80:6f:6f:3e:49:f0:0b:43:15:
         b7:81:49:5b:2d:52:75:7d:ed:37:bc:21:84:f0:24:08:f1:31:
         cc:1f:ff:cc:45:a7:aa:63:78:e8:6b:59:d4:69:4f:24:1f:c2:
         2c:1a:13:c9:fe:71:38:50:6f:d6:5d:11:36:c0:49:09:91:88:
         28:d5:7c:fb:09:89:8a:e0:a0:cd:b0:41:44:69:48:60:6c:03:
         29:0b:c7:0e:5e:95:8d:67:9a:57:3e:66:7e:16:6c:77:51:72:
         46:b3:30:3d:6e:df:ac:52:e1:f1:d5:14:66:d0:33:34:48:e5:
         f7:d8:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:08 2026 by rpki-client