Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91e86504-ad0b-3836-a648-285991ad9cb5.roa
File:                     91e86504-ad0b-3836-a648-285991ad9cb5.roa (raw, json)
Hash identifier:          IQXWAjRDWvLJD/vSDlkeGodFU7pymVd02E9CED6Bu9g=
Subject key identifier:   8F:E8:56:9B:EC:D9:8C:0A:13:43:39:14:E9:84:C2:EB:E5:91:23:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FBE9C54ACD1099591FC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91e86504-ad0b-3836-a648-285991ad9cb5.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396603
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:be:9c:54:ac:d1:09:95:91:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=6aa2d061-acca-4e77-a169-d58f5882469d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7f:35:8b:c8:a1:5a:7f:52:06:65:c6:97:3b:
                    8a:53:9b:e1:18:01:b5:30:fe:b5:b1:c8:01:6c:90:
                    ce:55:f5:13:9e:4a:17:bd:6b:b2:40:86:72:bc:79:
                    28:67:06:23:7e:33:20:48:0f:2e:1a:b5:9e:cd:57:
                    51:f0:95:24:8a:b3:29:e7:b2:18:5a:33:8a:d8:70:
                    51:c5:c4:86:36:21:aa:4f:2e:c2:c6:42:e7:7e:ff:
                    bb:a3:35:19:56:a1:64:ae:36:be:28:df:85:21:8d:
                    43:45:e6:99:f8:1e:77:07:a7:56:4d:1a:c2:b6:e7:
                    82:f9:a2:28:ed:39:9f:ad:fa:c3:15:fc:d7:f8:1e:
                    eb:c4:4e:5e:fe:18:aa:9a:39:4b:f5:65:24:20:98:
                    67:d2:36:5c:75:b8:cb:f6:92:88:15:9d:4a:7e:b6:
                    f2:3b:92:7c:ff:ac:63:7e:31:ff:35:4b:36:a3:75:
                    71:5a:ba:ab:df:00:fb:d0:f1:92:ce:b9:c1:e6:b0:
                    14:4f:a1:75:bd:6b:6c:3a:8a:57:6b:fc:2c:91:c6:
                    e7:84:7e:10:5a:cd:84:10:9a:fc:c2:b2:20:98:54:
                    9e:33:b7:3b:7f:ef:dd:18:87:f4:ca:14:2d:12:0a:
                    b7:b2:42:98:60:08:1a:ed:8d:73:00:6e:5e:53:5c:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E8:56:9B:EC:D9:8C:0A:13:43:39:14:E9:84:C2:EB:E5:91:23:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91e86504-ad0b-3836-a648-285991ad9cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:84:81:48:d6:92:99:0f:73:da:cf:2a:dd:9f:a6:e0:68:
         3a:3d:f5:7f:1b:3d:4a:5c:8a:75:90:82:ee:2e:ef:72:67:e7:
         2d:ee:54:bb:76:3b:88:aa:f9:85:c9:8f:53:34:09:49:b9:23:
         49:8c:45:20:35:0d:3a:67:37:91:5d:bc:38:38:99:90:91:6f:
         a7:8e:43:ba:02:04:71:1e:1a:e1:06:ff:8c:dd:9a:c5:bf:25:
         19:79:4d:7e:0b:09:cf:d6:2c:7a:ea:b9:d8:03:97:40:9d:be:
         32:26:91:4a:c3:e9:0a:8c:da:08:79:12:20:77:d4:89:e0:6c:
         aa:32:1e:79:3e:ca:09:6a:3d:37:dd:32:1e:fa:7e:44:31:1c:
         17:91:33:25:13:a1:7f:15:3f:cc:9d:68:8c:11:9c:02:f3:16:
         1f:df:dc:a4:f5:dd:53:4a:a1:74:13:87:97:e9:a0:a1:85:15:
         4e:0e:c7:0c:f0:6d:14:ca:ff:1a:7f:65:33:35:4e:40:5e:3e:
         bc:e2:4e:58:18:dd:e1:19:0b:a6:b9:ea:7b:a1:72:49:11:af:
         41:ad:1d:b1:cf:80:62:84:f1:d0:4c:60:c2:72:84:f1:82:93:
         aa:7b:d0:44:40:c8:b7:bb:a9:d3:bd:17:53:38:e7:e3:cd:71:
         b1:02:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:53:02 2026 by rpki-client