Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e66c8f-31ff-3f0d-92b7-b7bb51e37706.roa
File:                     a4e66c8f-31ff-3f0d-92b7-b7bb51e37706.roa (raw, json)
Hash identifier:          HxCjiKSGhUMjFRHuzu8X8+aD9CVIjWyLihxtiuiLMOY=
Subject key identifier:   64:81:88:76:3F:D5:00:0D:75:5B:B8:7C:61:61:44:90:F2:10:CF:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E736A3200677E24292A752370
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e66c8f-31ff-3f0d-92b7-b7bb51e37706.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     36625
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:32:00:67:7e:24:29:2a:75:23:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=685d5d45-7673-4cad-89b1-194b1c489417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:ca:ca:75:93:65:d7:62:97:8d:1b:3d:70:
                    f2:02:e4:a6:42:8d:dc:3e:7e:ff:11:b0:3f:41:77:
                    16:2e:7c:6f:c1:df:8d:4c:3f:3f:b7:34:bc:ce:72:
                    10:5d:8d:32:2a:99:58:d7:d2:db:af:05:85:74:c5:
                    f3:bd:0c:6a:a7:a2:98:38:70:53:10:64:09:e3:52:
                    30:73:72:c5:6b:cf:21:b2:39:61:41:c5:c5:36:b5:
                    9a:3a:55:ed:f0:8e:33:5b:ce:74:39:86:b2:3f:60:
                    79:7d:6c:78:1e:1e:18:07:e1:52:9f:93:6d:df:3e:
                    8e:ae:4f:b8:42:25:fc:88:e7:3a:c5:3e:b3:c2:bb:
                    51:f4:d1:d7:40:ba:2e:ef:4a:0c:88:29:e9:ca:ee:
                    92:ba:76:2c:39:8a:11:fa:28:10:a1:4a:c3:7e:a4:
                    1c:dc:e4:37:0d:f5:cd:0d:59:12:54:90:d6:ad:31:
                    bf:18:2b:78:27:70:c0:78:38:92:15:a1:51:53:ae:
                    3d:f9:03:f5:8e:41:39:e4:b8:47:0e:21:3c:24:94:
                    19:74:3c:30:a8:9c:59:81:c5:b1:e4:d3:6c:22:a6:
                    57:5d:f2:da:c9:2c:31:2a:2e:25:a0:c9:a7:e5:a8:
                    ad:3b:b9:0d:31:a9:c4:40:89:14:d0:8e:8d:4a:7b:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:81:88:76:3F:D5:00:0D:75:5B:B8:7C:61:61:44:90:F2:10:CF:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e66c8f-31ff-3f0d-92b7-b7bb51e37706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:85:f0:c7:a8:28:9f:ea:41:ee:69:af:6b:ce:49:86:db:dd:
         75:28:66:ae:98:ec:92:f3:c0:b3:dc:6d:bd:ab:fc:dd:85:fe:
         20:a3:1e:7c:db:86:7d:57:b7:b0:8f:71:28:4e:85:ef:8f:ef:
         b5:6a:0f:e0:fe:ce:dd:aa:4e:6e:fb:9e:6f:bb:f1:2c:a6:94:
         c9:92:19:dc:a5:d1:59:a5:cd:aa:80:c9:7f:04:f6:08:fc:00:
         22:87:ae:a3:28:32:b0:ed:fc:a0:01:89:f0:cd:93:51:ea:8c:
         30:e5:db:72:a4:c2:c7:90:e8:2c:8b:c9:e9:5d:19:e3:6c:e0:
         7f:19:32:ca:2c:96:83:f9:34:78:bf:ad:f6:cf:5e:a2:16:dd:
         f2:93:ce:78:9c:83:f5:fd:5e:f2:cf:99:20:72:79:ff:1a:b8:
         35:85:33:55:a0:89:cd:d9:a2:7d:ac:28:b7:e3:cd:60:b9:36:
         ca:96:2b:42:7e:cc:77:55:92:c8:e9:8e:f0:b3:3f:cd:ce:b9:
         b8:ca:b3:d7:24:3f:d1:ac:76:ff:e9:b5:71:41:12:c1:6b:02:
         f4:cf:cb:13:e1:15:70:0b:13:12:c1:ba:c0:75:a6:a2:6a:50:
         a7:5a:39:c1:a0:dd:9b:ba:8b:bb:e3:ab:fb:44:e6:2f:06:61:
         41:e8:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:30:19 2026 by rpki-client