Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d84c85-b2a6-341a-9dde-0b64d2ed9185.roa
File:                     a9d84c85-b2a6-341a-9dde-0b64d2ed9185.roa (raw, json)
Hash identifier:          Wb29HrRYjR4rr5rQfSJey7vRw1hwrd6lPLuSDHWryHQ=
Subject key identifier:   DF:DF:00:69:86:76:18:B5:A0:54:2E:B1:0E:DE:7A:AB:14:12:E1:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5A4A1A8BB041FB4529305400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d84c85-b2a6-341a-9dde-0b64d2ed9185.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     396560
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:1a:8b:b0:41:fb:45:29:30:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=4efa1936-3667-4807-90ab-9016e4b22e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:75:5f:27:3e:8a:fa:44:9a:3a:c9:be:c5:
                    cf:6e:f6:04:1f:9c:62:ce:62:71:84:1f:5e:67:f9:
                    17:58:2c:2b:c3:f1:d7:18:27:11:e7:d1:5f:8e:fd:
                    0a:3b:00:5d:6e:52:22:26:28:8f:7b:a3:b7:50:79:
                    9c:f3:db:91:c2:c5:5e:84:35:27:f1:31:08:4a:46:
                    6f:49:2f:7e:13:93:72:30:ce:59:f8:0d:71:6f:68:
                    f2:02:cd:21:db:5c:c8:88:ce:51:2a:5a:9c:b4:c9:
                    66:12:5b:9a:6d:79:68:58:ed:c3:c0:aa:35:79:36:
                    d1:ba:83:40:56:53:e8:ce:ad:3d:4a:12:95:02:05:
                    41:a2:20:59:9d:13:5e:e0:9f:97:49:2f:73:61:73:
                    93:70:e3:88:e5:65:b7:9d:23:0e:af:3c:b7:3a:4d:
                    da:f9:99:83:60:3f:dc:f7:a4:33:db:4c:2d:9a:d7:
                    13:a1:55:40:2e:a7:04:b9:d9:97:0b:48:e6:4c:21:
                    97:53:08:4b:f3:17:42:b1:37:00:32:f9:4b:95:98:
                    1d:c1:c8:63:7e:03:81:fa:63:43:d1:54:df:c6:d2:
                    82:66:f2:f0:0d:fa:07:f0:28:d9:1b:a4:73:fb:dd:
                    ad:59:b5:a8:be:30:48:0a:a0:2e:c7:27:3f:d0:7c:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DF:00:69:86:76:18:B5:A0:54:2E:B1:0E:DE:7A:AB:14:12:E1:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d84c85-b2a6-341a-9dde-0b64d2ed9185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:be:f7:e8:ee:1c:13:1d:b1:de:af:2b:33:65:9c:49:41:
         25:d7:3a:60:1a:9f:70:1a:73:dc:9e:9e:39:5f:f0:1d:c1:a4:
         34:3d:fd:68:6d:62:63:08:69:94:c6:2e:77:68:7a:5d:01:0d:
         6e:d0:37:70:6b:a0:b4:58:b6:74:e2:e5:ee:0f:91:6a:95:d7:
         3a:bc:c1:80:e6:26:26:8a:a6:30:3b:e2:bf:63:4d:93:9f:01:
         19:d9:73:3d:30:52:87:b0:84:25:2d:4c:80:1f:94:41:55:3e:
         87:3f:85:fe:97:94:0a:2e:90:de:ab:fe:14:ed:b8:95:4f:c4:
         64:63:1f:46:2d:a2:f2:36:f2:d1:e2:fc:c3:99:1b:9e:25:31:
         66:9b:c0:5a:8c:07:7c:fe:d7:7d:11:45:a9:2d:16:0e:6d:0a:
         f9:a1:79:aa:10:9b:d4:4b:4e:5e:e5:bf:81:4b:56:3c:52:64:
         a1:cc:4c:ec:ef:b6:03:4f:64:78:5e:5b:3f:d4:a3:8c:a0:1a:
         4e:cb:96:0e:d4:2c:9f:0b:47:d5:21:bb:50:fd:b4:80:e5:87:
         12:f2:26:bb:f0:f6:c0:a8:c2:28:a6:71:f2:a7:fc:87:2b:f4:
         60:48:b2:a3:dd:b4:56:40:3f:85:ed:41:04:48:af:ae:f0:38:
         2c:70:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:39 2026 by rpki-client