Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa
File:                     89c06455-1970-3ace-94ff-3ae3d7e39c35.roa (raw, json)
Hash identifier:          mTp/pG6Y27qSZRP5goTkpR2oxUCDQwMEpGSAZWybxiM=
Subject key identifier:   5E:D8:57:E0:0E:E9:D8:2C:2B:CE:21:B1:DB:D5:C8:AE:D0:7A:BA:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5A4A17FEFFFA3F8A0DA55180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     396572
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:17:fe:ff:fa:3f:8a:0d:a5:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=7f58ffc6-941a-4bab-85ba-f7d6d946dc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:c4:d4:08:13:a1:76:db:6d:9b:15:ab:0f:
                    7c:ed:3e:7e:83:89:96:da:4a:0b:ea:41:5c:30:07:
                    5f:0f:ce:0a:cc:f7:4e:2d:20:43:6a:13:65:c2:33:
                    85:58:14:19:f6:86:6c:fc:03:2e:61:c0:9f:78:b2:
                    55:f9:a0:79:d7:2e:9e:99:e4:19:01:21:fb:27:fe:
                    52:ab:45:c4:f7:8f:ac:0b:8b:f3:50:4a:1e:b6:cc:
                    a5:c2:fc:9d:77:1d:64:ba:2e:45:77:7b:53:56:24:
                    84:12:be:8a:97:20:37:d4:90:0e:08:08:b8:15:99:
                    38:1b:f5:01:d0:fc:14:7b:9d:ca:b3:00:cc:77:ff:
                    8d:94:e1:c6:18:4e:40:1a:7a:69:fb:9d:a5:4d:ee:
                    cf:6d:72:28:76:ae:3b:e3:3b:49:de:5d:c1:cc:8e:
                    dd:77:d8:2c:76:e3:4c:2b:7b:0d:cb:e7:53:db:97:
                    eb:50:ff:05:4b:b0:3c:17:4b:15:69:3f:02:e5:f3:
                    6e:03:61:31:8b:76:94:ab:23:0b:3b:67:71:9f:10:
                    ac:82:f0:66:55:9f:9a:59:e4:2f:39:87:52:c9:b8:
                    8c:01:8d:13:89:f6:ca:f8:13:de:6f:1e:84:ca:e8:
                    e1:21:fa:d8:9a:ba:df:5f:ed:7d:9a:df:cd:21:3e:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D8:57:E0:0E:E9:D8:2C:2B:CE:21:B1:DB:D5:C8:AE:D0:7A:BA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:27:65:be:ca:9c:78:24:27:35:43:81:b2:0d:bb:3b:ae:22:
         a5:f4:0e:2e:ca:98:f8:e3:de:be:fb:ae:2a:87:17:41:46:52:
         c3:d7:90:cb:85:8f:0b:5f:2a:27:ef:52:cb:8e:2f:6b:04:e0:
         fe:d4:c2:3b:59:a8:d3:6a:dd:9a:5d:49:42:b9:17:b5:49:ae:
         a5:64:b5:b8:06:aa:bc:13:74:91:0f:82:52:49:c5:7f:d8:e9:
         25:01:76:2e:c5:21:f9:67:f4:45:e2:3a:7a:49:b5:4c:29:ec:
         85:a6:e6:11:96:9a:65:e4:b6:d8:f1:b1:eb:12:67:53:ca:9e:
         aa:2d:ec:7b:00:90:e3:e1:97:c4:84:01:e8:07:07:b2:43:d0:
         2f:1a:d2:91:6d:fe:31:14:ed:c5:82:06:48:3e:48:1f:4f:4c:
         eb:bd:9e:db:ab:0e:91:81:7a:bb:17:13:ec:29:b6:8c:c7:fc:
         88:81:6a:9d:4f:af:92:db:cb:75:78:31:38:b3:ad:e5:b9:33:
         26:96:02:de:f9:0e:fd:06:6e:63:26:03:90:a3:2a:d0:a9:3c:
         e0:c7:63:7c:15:cd:b1:b5:1f:d4:bf:d0:b7:b8:bb:c5:0f:fd:
         4b:ba:b4:6f:97:f7:9a:e4:cb:df:b0:4c:32:4d:3f:84:cf:84:
         88:39:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:24 2026 by rpki-client