Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa
File:                     8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa (raw, json)
Hash identifier:          WCQ5mxHdBqmZH6R9TcNLQ4VUAEXJYBvKzIJyodRsVWU=
Subject key identifier:   8B:00:00:B9:36:90:F3:67:38:41:61:89:64:CA:A6:84:76:54:14:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB7FCA1BAA487AF422C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396550
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b7:fc:a1:ba:a4:87:af:42:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=096b5c21-4317-4d17-9276-693412cf0346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:7d:20:d3:54:a2:56:f4:66:30:e0:9e:99:
                    09:ef:89:04:5a:1a:4a:1a:11:af:26:c4:13:c2:42:
                    bc:3a:fc:24:2b:e3:ec:76:fb:89:86:18:3f:b1:75:
                    30:20:01:0e:71:82:a8:da:11:a5:a0:6d:de:71:11:
                    4e:86:37:e3:ba:d3:9f:74:99:64:57:ba:b2:c1:3e:
                    8e:26:49:45:0f:fc:54:18:13:e4:f4:9b:0e:f1:d3:
                    05:01:e5:fe:03:8c:e8:28:38:53:01:9f:26:be:a6:
                    1e:87:b2:22:f4:48:4e:33:20:46:ec:84:2b:d0:93:
                    20:48:5e:95:7a:87:bd:10:18:6b:4b:41:f7:f2:63:
                    af:da:d1:f7:79:06:d5:26:bc:63:a5:d5:f2:29:90:
                    ef:69:5f:ec:d3:93:80:c4:6b:26:99:80:34:21:51:
                    b2:c5:0b:17:92:8f:f7:b0:09:77:92:c8:6a:3e:42:
                    d8:ea:cf:64:e1:ad:1a:c3:24:89:b0:5a:f3:b0:26:
                    03:f6:3f:7f:79:2f:af:77:bf:22:e1:87:44:8e:95:
                    c0:97:0e:24:da:44:81:88:97:2a:d4:89:b1:9e:71:
                    15:00:9c:0c:e6:13:76:18:2e:18:82:2e:99:0e:ba:
                    7a:9a:bd:84:8b:d2:3e:b6:ec:4e:9d:4e:0c:d2:5b:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:00:00:B9:36:90:F3:67:38:41:61:89:64:CA:A6:84:76:54:14:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:31:d1:3f:91:f0:93:f7:75:17:c1:75:dd:da:96:0f:e6:
         32:aa:b7:37:12:cd:ef:99:29:75:97:20:7a:d7:bd:8d:37:c7:
         b1:39:eb:9a:05:57:09:0e:cd:fa:00:51:a5:a0:a9:3e:c1:04:
         55:42:44:fd:13:0c:56:e6:3a:2e:e5:8b:4b:0c:31:99:8e:3d:
         ab:dc:b9:c1:a0:ae:f9:7c:e7:fd:71:18:69:f5:fe:76:31:dd:
         87:dc:b5:91:06:8c:45:41:1f:f8:0a:c1:61:2d:de:80:39:47:
         1a:0f:03:46:86:5e:60:c4:f2:4a:e5:43:3f:92:bc:15:4d:05:
         8b:3f:19:ee:e2:df:1e:07:6f:66:62:54:64:ab:49:1a:f3:52:
         a6:a0:28:7a:2d:15:db:0c:5d:e0:dc:e0:4f:1a:c6:80:dd:80:
         3a:3a:23:95:7a:c4:ae:bd:5d:1b:7f:56:d2:e0:06:4a:9a:9d:
         42:c0:ae:6c:8d:46:07:5a:48:c6:5b:d3:84:79:8e:11:d8:0e:
         b3:75:51:22:33:7a:70:8e:35:5a:e4:a7:81:57:e1:b1:cf:65:
         41:18:29:12:99:4a:6d:dc:02:13:ea:59:4d:ff:cd:4f:a2:92:
         7f:49:a9:11:f9:77:56:9a:7e:0a:8c:ab:7b:4c:49:07:68:8e:
         8f:82:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:28:41 2026 by rpki-client