Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85be2b07-8b67-39eb-b8a4-c530b10cb5bf.roa
File:                     85be2b07-8b67-39eb-b8a4-c530b10cb5bf.roa (raw, json)
Hash identifier:          jmYoWr2Z8VKRkhvHTjnjCm7H3yZlG55YI1RTWMGPsG4=
Subject key identifier:   C4:D5:E3:F3:5A:8C:FC:55:2A:39:85:AE:65:47:31:4D:DC:F3:61:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E683F5D249369FED45A00F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85be2b07-8b67-39eb-b8a4-c530b10cb5bf.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     396576
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:5d:24:93:69:fe:d4:5a:00:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=58ee1c1c-cec9-4f43-8646-1500edf88b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0c:43:05:d0:d9:2e:ba:55:17:0b:af:5a:16:
                    0e:71:b0:db:10:78:4c:db:7a:dd:31:7b:fc:b7:c7:
                    35:21:99:6a:63:25:56:01:38:5f:b5:f7:47:9e:30:
                    94:12:99:5e:b8:33:f0:c4:13:04:eb:c9:cb:ae:1f:
                    6e:49:2f:10:7c:d0:f1:d9:66:d4:95:66:d9:00:53:
                    f5:b6:db:91:d1:bd:b9:2c:5b:ab:18:0f:28:60:57:
                    10:56:ec:16:a9:d6:85:a2:54:cc:05:31:87:86:91:
                    c0:33:71:b5:0f:fe:8a:a7:92:0e:c0:60:49:c8:b4:
                    73:cb:b4:4c:a9:f2:94:b9:06:ad:8e:4d:57:01:23:
                    12:04:a4:1c:fa:69:3a:c0:fe:c1:e5:d5:bf:94:63:
                    8d:7b:71:28:20:85:99:ad:7d:5a:2f:f3:ee:e8:15:
                    6a:f1:42:d7:fb:13:f1:47:24:93:d8:f8:c3:98:07:
                    35:1d:4a:c9:ea:ef:f0:bf:4c:8c:51:37:84:32:d6:
                    e4:ae:4b:48:d8:74:6d:ec:38:2f:35:9d:a6:b8:22:
                    a1:16:f7:76:dc:dd:d1:d6:bb:0f:f1:b0:93:50:c3:
                    c7:03:07:ce:07:99:b6:01:cc:df:d0:d6:69:b2:26:
                    af:cb:f8:ce:1d:cb:18:18:1e:7a:18:4b:7c:57:83:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D5:E3:F3:5A:8C:FC:55:2A:39:85:AE:65:47:31:4D:DC:F3:61:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85be2b07-8b67-39eb-b8a4-c530b10cb5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b7:ad:80:d4:bc:40:5d:c3:01:f4:dc:de:a3:c4:a1:16:8f:
         5a:b8:b4:2c:ea:c1:d2:26:c7:4e:c9:d3:a7:3e:6e:67:6a:6f:
         61:03:4f:92:eb:4c:f3:8e:42:7d:61:de:b2:ab:c8:fd:50:c6:
         43:22:80:2f:6f:c2:7d:d0:74:ff:a1:c2:ed:d0:f4:d5:bf:bb:
         e3:9b:4d:60:47:49:c2:c0:e0:b8:b1:16:35:c0:bb:af:84:6d:
         df:1a:c5:95:ab:db:96:8e:11:33:c6:5c:1d:e5:dd:93:3a:27:
         6f:dc:07:61:0d:53:1d:78:ec:dc:77:7b:a2:0e:8c:d9:e4:b7:
         00:68:f2:9a:84:73:c4:18:30:33:82:bd:67:97:38:8a:8d:60:
         ec:d3:ef:04:7d:af:91:1c:24:01:45:02:e9:01:3c:cd:50:61:
         91:fa:91:cc:c4:54:1a:63:03:5b:ab:79:10:04:3f:a8:ed:eb:
         22:df:e3:e7:da:27:9c:92:ae:6a:36:a9:b6:92:6f:bc:35:40:
         44:92:e6:2d:ad:50:bb:d2:0a:18:60:68:6b:6d:ab:28:3c:8a:
         a1:fd:e3:69:0f:5c:da:fc:58:24:fe:34:5e:f9:24:b2:3c:4b:
         83:97:6a:67:25:2a:87:da:8c:94:0b:1e:f8:50:48:2e:67:1f:
         37:8d:d2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:14 2026 by rpki-client