Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92c736eb-d40e-3a21-ad3f-ac67dce62b04.roa
File:                     92c736eb-d40e-3a21-ad3f-ac67dce62b04.roa (raw, json)
Hash identifier:          10kmM909oTowYjztj5w98BCc9ddd5cvuS9nPBYXz3mc=
Subject key identifier:   E6:67:63:53:CD:F2:EC:A2:59:48:74:D7:6D:11:39:0E:3B:58:0B:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A2029DDC20F1AC49C0043C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92c736eb-d40e-3a21-ad3f-ac67dce62b04.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     396595
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:29:dd:c2:0f:1a:c4:9c:00:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=42bc506d-371c-4b3a-b7a9-7f877b61b9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:41:d6:aa:f4:76:9e:89:03:0a:f7:7b:55:
                    a2:32:22:67:47:1a:ae:f8:ae:10:05:66:e7:7c:fa:
                    87:5c:13:31:ce:43:82:2f:f4:87:51:94:7a:bf:a6:
                    29:78:4f:26:6b:af:95:81:46:42:c9:f4:55:95:78:
                    95:6f:06:b4:c2:c5:d5:d6:b0:df:f9:d7:84:96:96:
                    69:4d:fc:10:f1:b0:da:8c:37:20:f5:a1:7e:f7:5d:
                    ed:94:ae:06:45:ff:12:45:16:27:bc:5e:25:aa:e5:
                    1e:6b:d3:17:3f:e6:0d:24:7e:22:75:c9:ae:e5:ad:
                    66:75:67:05:fb:f1:a5:56:30:bf:9e:41:f2:a6:7d:
                    b0:3d:a6:b0:89:fd:c7:94:f9:74:ae:9f:c0:28:00:
                    e1:40:c1:70:48:7a:c1:f4:b4:25:05:d1:85:6b:34:
                    09:da:d4:8e:a6:99:ce:81:75:78:1b:cf:ea:df:bc:
                    9d:95:2c:02:89:ee:df:4a:7e:f2:cd:9f:78:93:19:
                    ac:4b:24:02:e1:84:77:8e:07:f2:f9:07:65:3f:13:
                    e3:dd:3f:3f:b2:f7:e6:8a:e7:21:b7:29:5c:2b:10:
                    fb:b9:35:83:26:36:51:01:5c:52:b1:51:7b:ca:eb:
                    cd:d0:91:46:61:92:f6:a6:cb:fd:23:e7:ec:70:88:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:67:63:53:CD:F2:EC:A2:59:48:74:D7:6D:11:39:0E:3B:58:0B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92c736eb-d40e-3a21-ad3f-ac67dce62b04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c8:2e:dd:7d:d4:71:08:79:69:a9:c8:f2:3d:ce:58:f4:6d:
         33:bc:b7:27:2e:06:2c:8e:3c:99:6a:99:a3:aa:6f:28:b1:d5:
         52:01:a4:2d:16:ec:47:d2:ea:ee:8d:11:d7:1e:cb:77:ef:ea:
         51:99:4d:6f:58:2d:2c:83:8d:02:28:8d:2d:b1:a6:e7:ff:72:
         36:43:7e:cd:fa:ad:8c:0f:7a:eb:1b:dd:5f:50:a2:d2:86:f8:
         67:a5:e2:13:58:fd:8a:6e:5f:f3:7c:7b:70:19:06:48:92:d2:
         02:d7:54:b8:44:53:60:d9:a4:75:37:29:b3:7f:fc:65:2e:d6:
         38:aa:09:b5:0a:ef:73:53:be:a4:33:42:cc:75:ae:99:9e:98:
         97:00:80:35:cb:28:f0:7f:70:74:ee:98:52:b1:59:14:aa:4f:
         e3:20:26:1a:6e:af:c6:59:b4:96:c3:7e:8a:ab:a6:a0:55:7d:
         34:42:c2:2e:24:2c:94:8c:0b:fc:49:e9:e7:01:ab:39:70:bd:
         86:00:49:81:cd:ed:9d:84:d7:86:40:97:28:4e:3f:59:cf:47:
         9e:e8:56:f3:4d:85:d0:77:69:00:d1:9c:5b:f1:0a:b1:2d:5c:
         7b:04:79:13:d7:dd:a6:31:da:1c:19:bf:ea:a7:ff:8d:7f:e1:
         d3:b8:a4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:59 2026 by rpki-client