Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce69744-cdc6-3e30-a694-f2ecb9523b88.roa
File:                     7ce69744-cdc6-3e30-a694-f2ecb9523b88.roa (raw, json)
Hash identifier:          k5eZEfGS4ND8cKMlELgWkjv/RIeJgLQshK9Kzhk1stU=
Subject key identifier:   08:CD:DD:FB:4D:15:41:9C:BA:81:12:EA:7C:59:2E:D7:10:96:E5:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA2971043BC16A0671A280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce69744-cdc6-3e30-a694-f2ecb9523b88.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     19836
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:29:71:04:3b:c1:6a:06:71:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=c96be135-cb8d-4477-ba63-45f7bb1d5083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:48:af:fb:0a:e6:a6:23:3c:4b:e6:0a:35:0d:
                    ea:5f:d9:ea:4f:94:56:0c:ec:a8:da:39:b0:67:a9:
                    74:cd:7f:89:45:9b:58:df:78:8d:3b:4f:36:38:c6:
                    30:39:c3:25:c6:24:d3:14:d3:21:13:19:09:8a:14:
                    61:09:29:a8:69:e4:2e:d8:48:bf:75:dc:0e:74:91:
                    f0:90:5a:21:ad:69:14:4a:ce:f9:ac:90:1d:ea:0f:
                    31:45:8f:ea:98:bd:72:02:3c:44:cd:63:44:8b:6b:
                    97:c4:56:fc:85:4f:ed:92:82:cf:91:f3:b4:78:69:
                    2c:d9:63:1d:58:24:0a:45:5d:13:f5:8b:02:72:ed:
                    30:76:99:61:91:e8:2a:6e:9f:a7:c3:a4:70:10:09:
                    fc:f8:52:57:e1:cd:4f:87:15:f5:eb:cb:8b:ff:25:
                    e9:76:8d:8c:a0:19:8f:7e:71:a5:6c:68:e7:cc:78:
                    a2:e1:3f:9a:73:cb:d0:1b:6e:80:40:a3:94:ed:20:
                    a1:66:38:e3:d3:38:13:65:79:84:20:6d:a0:ad:4b:
                    03:8b:23:56:c3:46:64:76:82:02:98:2d:68:e2:5f:
                    92:84:59:e0:70:b5:76:fd:41:8e:e7:42:64:2b:3d:
                    5e:88:62:18:af:6c:ea:28:61:14:a4:cb:97:54:65:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:DD:FB:4D:15:41:9C:BA:81:12:EA:7C:59:2E:D7:10:96:E5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce69744-cdc6-3e30-a694-f2ecb9523b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:90:c5:38:f4:5a:ff:1b:07:c7:d0:8b:b0:37:a0:5f:85:2f:
         c8:f1:ac:4b:35:87:b4:52:2d:dd:67:6c:ea:73:11:ad:6f:1b:
         8e:e2:fa:60:4d:4d:ab:01:98:64:96:bc:e7:36:df:fe:1b:cb:
         4f:3d:06:63:d9:64:a5:7d:2c:ad:bc:25:01:f4:14:62:d8:fc:
         26:43:44:b6:f3:dc:33:ce:a0:32:c1:7b:ce:4c:1b:40:de:51:
         d9:40:a2:73:7c:37:fe:7d:af:15:27:b1:6c:cc:7c:7f:9a:21:
         7d:0c:cb:dc:fc:4b:70:3a:40:32:37:c7:3d:68:7a:1b:d4:7c:
         9b:43:79:c4:f2:54:13:6b:9c:3d:b3:2a:5b:96:6b:a0:96:0a:
         b6:17:e7:81:a9:de:4a:24:df:f6:54:f3:8d:73:0c:fe:33:f3:
         ac:24:34:13:0f:0c:75:cb:10:d4:d7:7d:90:e5:07:40:12:39:
         cf:55:c2:3f:3f:d9:53:6b:5d:93:55:1d:fd:57:20:15:9f:45:
         cf:8d:b9:28:72:96:6a:94:34:0a:f6:e5:ea:f7:08:82:ad:cd:
         2c:1c:62:46:19:87:30:58:97:74:09:8d:e2:a0:a4:68:44:20:
         51:23:e0:28:29:05:aa:78:7b:9b:38:c2:36:08:67:49:94:dd:
         be:8c:7c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:07 2026 by rpki-client