Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa
File:                     7d10c588-2d28-39da-accb-74d67405c2a7.roa (raw, json)
Hash identifier:          Udu8hm0M/Ilnv2Ohc54SA6daotl/5xHyNwZmAen03Dk=
Subject key identifier:   C3:8A:8F:F7:C7:68:46:96:A9:D2:8D:AB:8C:BE:61:1A:82:AC:DE:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A202A3A728997212FC60CBC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     396608
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2a:3a:72:89:97:21:2f:c6:0c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=8a974c7d-1e4e-4bf4-b2db-5f6db6082964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:bc:9b:ac:79:7e:cd:d4:dc:8d:56:60:ca:
                    3d:41:45:ee:cf:98:8f:90:cb:8a:8f:0e:0d:d2:75:
                    ca:f3:d8:5b:90:9c:77:91:b4:a8:e7:ee:d8:e7:ad:
                    d7:4a:d5:29:a3:dd:3b:64:d7:ef:c8:06:9f:54:be:
                    54:78:44:62:aa:35:ce:aa:81:7c:bc:a1:34:d7:f0:
                    df:31:29:0b:52:fd:48:05:b5:82:57:8e:10:8d:0f:
                    2d:27:c3:3f:b9:7c:87:bc:bf:f8:69:9d:1e:07:ff:
                    54:8d:70:80:d6:49:32:35:05:ef:92:99:44:ba:35:
                    3f:ec:ea:9a:ef:61:04:aa:b2:e5:d6:db:22:7d:8f:
                    12:68:6a:7f:d2:35:e1:1a:cf:cd:e5:b3:42:87:6b:
                    3e:75:29:b0:40:67:1b:ba:ce:a1:bf:0d:76:8c:a3:
                    b6:cb:37:3f:94:6c:d5:ec:c0:3e:f0:4a:19:f8:5c:
                    c0:24:4b:76:f5:a7:7d:b0:be:1c:3c:9d:0b:0b:ef:
                    54:15:bd:a3:57:a9:89:bd:ba:56:35:12:4f:bb:65:
                    61:4f:92:7a:04:53:4a:d5:e1:f3:87:e9:31:ee:1e:
                    04:01:e3:75:ae:32:08:fd:03:1f:53:6a:46:7c:ee:
                    64:9a:85:51:e2:c6:26:53:49:f2:bc:42:9d:2d:8a:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8A:8F:F7:C7:68:46:96:A9:D2:8D:AB:8C:BE:61:1A:82:AC:DE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:76:ae:0f:a0:e0:e5:c1:d0:be:40:1a:64:8c:c7:ab:18:
         35:66:46:c3:ad:75:67:59:cd:21:fc:b3:1d:4f:eb:d6:ee:ac:
         c8:ca:07:26:7b:a7:61:82:f3:04:cb:e0:fb:3e:e8:d7:b3:d3:
         df:fe:14:15:e3:ee:fd:60:ba:87:b3:5f:e3:40:1c:b0:f8:4f:
         2d:0c:3f:ff:f5:d4:7a:6d:59:a1:94:e2:5e:56:6d:d0:d6:8b:
         8d:75:82:de:80:78:b3:b3:72:53:61:a3:42:06:ba:40:ff:35:
         cc:e5:4d:77:f2:81:c7:38:2f:66:6a:37:a2:68:5f:0e:b4:66:
         92:02:42:95:7b:c4:0c:e6:02:2a:e0:16:2a:82:26:c9:6b:2a:
         76:dd:78:e8:4b:0d:35:47:d6:e6:de:dd:3e:7b:39:04:02:72:
         f8:b3:84:98:ad:10:75:df:17:25:7e:be:84:2f:da:8a:d4:77:
         3c:b3:7e:b2:a2:dc:78:bf:1c:02:7b:be:8b:6e:14:8f:38:0c:
         af:7b:92:91:d0:b4:06:53:b9:49:89:27:9e:d7:53:02:d8:93:
         b2:f8:3c:3f:1f:86:cb:31:ba:3b:35:04:dc:9e:0a:de:31:60:
         e5:3f:b8:5a:74:9c:c1:1b:53:05:97:b8:d9:6d:6a:03:a9:d2:
         93:0a:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:01:25 2026 by rpki-client