Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa
File:                     9614d5aa-742e-3d66-a510-46747d6bc5d4.roa (raw, json)
Hash identifier:          zBOkor50fvYoYiijvhXqiIZ4ag4wVwcns3DhY0xqpjg=
Subject key identifier:   0E:65:02:77:A4:6D:47:08:E3:DA:49:46:51:15:E9:1E:B4:BD:61:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5A4A1A3B6F84D27B714E6780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     396561
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:1a:3b:6f:84:d2:7b:71:4e:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=bcf3b257-b6ad-4d56-8a51-4c2086b04326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:39:3b:bb:a1:9c:63:85:dc:7b:39:b1:e9:
                    af:e1:16:f9:2f:fc:8d:99:c9:eb:11:dd:36:16:fb:
                    b7:31:b7:39:77:27:cd:dd:56:74:77:a4:0c:d0:8d:
                    d0:8e:38:2e:bf:28:39:60:f0:6b:96:f3:ff:fd:c5:
                    66:1b:1a:f5:97:48:3d:80:56:86:2d:ce:d1:1c:9f:
                    f7:6b:86:95:9a:da:1a:65:3b:ab:08:1a:ad:10:07:
                    19:e9:84:97:9b:c1:c4:2f:bd:31:6b:10:f6:50:33:
                    4e:2e:1c:6a:64:81:13:9d:35:7e:99:da:fd:9b:cd:
                    50:43:40:9b:8b:9e:a6:60:19:08:93:91:94:ad:0d:
                    08:db:e2:c9:95:c4:39:3a:15:17:66:91:97:e3:e3:
                    b7:21:99:66:40:6a:89:a2:0e:41:a0:a0:62:05:80:
                    c7:40:ed:16:27:82:50:d4:32:de:cb:27:0c:6c:85:
                    bc:4d:65:22:ea:ca:34:f2:28:bd:45:80:0a:5c:c4:
                    13:fc:fd:1b:5a:36:06:53:db:f3:38:e2:a9:e4:96:
                    ac:bd:51:b2:9e:e8:8a:5d:2b:13:56:26:5a:ae:77:
                    eb:cf:51:2a:50:e8:e1:8c:77:6c:a6:25:79:17:8f:
                    f9:7f:5c:1d:e0:af:2a:7c:73:d3:45:f7:03:d7:8c:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:65:02:77:A4:6D:47:08:E3:DA:49:46:51:15:E9:1E:B4:BD:61:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9614d5aa-742e-3d66-a510-46747d6bc5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7a:07:00:31:5f:fd:63:e0:45:8e:94:2a:e6:dc:3e:59:fe:
         fa:49:ba:1c:05:7b:46:fa:86:25:6e:31:f1:ca:f4:7a:7f:7d:
         c9:a9:79:e5:fe:c6:17:98:a8:b6:e3:39:13:0e:1a:33:a1:4b:
         3d:77:4e:5a:5d:d8:d1:22:90:99:a9:c3:27:ed:93:7a:6b:6e:
         4c:27:9f:5b:0e:91:c9:0a:7e:ec:9d:2a:35:bf:93:c9:6f:33:
         8a:05:9d:a9:30:8f:c7:9a:56:e6:fc:c8:da:4c:28:2a:26:11:
         58:4a:3f:6f:f1:0b:23:70:ee:5b:91:15:05:c2:a4:44:ac:cc:
         a2:d3:e0:64:38:03:1a:bd:23:05:70:16:4d:60:a4:2c:07:29:
         3a:63:8e:f0:17:1f:56:c2:24:1d:71:f6:83:9b:ce:6c:bd:a2:
         33:b8:c6:76:7e:74:15:12:18:d4:1f:1b:13:fa:a9:fb:88:a9:
         32:67:39:57:a5:91:27:51:ff:00:8d:03:61:8b:78:4d:f5:34:
         da:b0:9e:ca:ee:d8:49:fd:c0:73:ae:8a:a8:df:3d:59:2c:85:
         30:f9:df:14:6f:8d:99:10:30:85:3a:cf:55:39:c8:90:3a:9d:
         5b:2c:54:46:c8:63:2b:cd:82:b8:ab:b6:49:9d:3a:ae:7e:1e:
         fc:b3:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:21 2026 by rpki-client