Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e2b87d-bf1a-342c-bf9b-35fcc07638bc.roa
File:                     a4e2b87d-bf1a-342c-bf9b-35fcc07638bc.roa (raw, json)
Hash identifier:          QvFlurtuxBcvA0lFo2uy/oluGysPjiL/lDZ2IK3I80c=
Subject key identifier:   99:92:EA:9C:6E:88:E0:63:99:B9:8B:52:A0:1E:16:1C:62:B6:D3:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4C5964429655AF16ED8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e2b87d-bf1a-342c-bf9b-35fcc07638bc.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     36620
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c5:96:44:29:65:5a:f1:6e:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=3a2b38d6-3b43-42aa-988e-597d1329b229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:87:60:b6:fb:ac:e3:f0:b9:d8:3b:50:85:
                    53:38:dd:de:04:60:af:f2:e0:27:c9:30:7b:c9:1b:
                    5d:fe:41:14:d0:dd:1b:b0:40:55:d7:75:b3:f1:95:
                    57:4a:0a:a3:9e:a7:c9:79:2e:b5:78:5d:b2:22:09:
                    15:32:19:a8:49:0f:6f:09:ba:4e:bc:a6:bc:85:aa:
                    09:88:53:e7:e5:de:8b:66:67:e9:64:96:a9:16:06:
                    a1:97:1a:d2:45:55:ea:ef:6e:37:f2:78:c3:06:97:
                    89:18:d4:3f:93:dd:3f:b7:c6:a7:27:7c:5e:72:6e:
                    cc:39:aa:5d:72:6a:34:60:0d:9e:de:be:37:6b:50:
                    15:56:b8:45:3f:bc:26:1d:be:34:48:5f:8f:65:c6:
                    c4:46:16:d1:0f:41:12:b3:3e:60:7a:b1:ac:ef:c6:
                    74:f8:45:a6:c9:75:f0:35:91:e4:00:3b:bf:17:eb:
                    ee:5e:19:bd:a5:ec:89:dc:a2:70:ec:92:51:1b:aa:
                    4c:73:99:d7:d1:20:b7:88:57:e4:f6:20:68:6b:18:
                    61:5a:f5:4b:a9:d1:a9:e4:15:f4:47:c5:78:6f:5f:
                    6a:f5:ff:5d:0f:b7:a0:55:9c:27:82:5f:e7:e7:6d:
                    90:a9:f8:e1:1b:95:9e:6a:2a:65:8b:5b:9f:bb:30:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:EA:9C:6E:88:E0:63:99:B9:8B:52:A0:1E:16:1C:62:B6:D3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e2b87d-bf1a-342c-bf9b-35fcc07638bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:75:2c:02:d9:b9:73:0b:0c:e2:f8:44:1e:01:7e:2c:19:
         03:ff:65:78:97:ae:20:67:a6:d5:79:c2:ef:1b:35:38:29:32:
         9d:73:53:a2:2d:4b:58:05:3f:98:92:36:d4:bb:df:42:52:98:
         db:15:99:82:14:4d:a1:cc:24:7e:10:20:74:ab:95:44:bf:dc:
         d9:a8:29:5d:b3:0c:7b:fd:7f:63:3d:0f:56:30:6f:d8:e4:d5:
         d3:b5:26:a4:64:fa:6e:31:58:9f:e3:d0:5d:d9:35:ab:11:a7:
         09:49:8d:f7:e0:13:2b:66:4e:10:79:c0:44:6b:cc:b2:d3:b9:
         80:94:20:dc:55:41:12:c3:4d:62:2d:d9:69:95:76:10:ed:69:
         df:e4:c7:76:9d:31:ba:a5:43:e6:5d:2b:af:a0:77:0c:c8:55:
         70:69:83:65:e9:bd:3e:43:3d:bc:67:8b:d6:d4:86:14:53:74:
         98:24:b1:35:71:6c:c6:bd:15:75:00:2e:ae:21:2f:c3:ed:d6:
         04:81:b4:d8:60:58:27:da:63:ac:a2:0d:c4:e4:64:aa:65:dc:
         40:1f:a4:4f:c8:d0:6e:e6:9c:8d:9a:91:8f:76:d5:de:95:8a:
         41:37:c7:82:a1:ad:ee:74:d5:2a:94:17:6a:e3:45:25:f9:6b:
         5f:07:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:37 2026 by rpki-client