Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4192b0c-665a-34ca-94c4-9fb58f3f68bf.roa
File:                     b4192b0c-665a-34ca-94c4-9fb58f3f68bf.roa (raw, json)
Hash identifier:          zqZg6aJVBfdDe93D9tiRkV/A0hmwcnIN+xi6xsPIk0U=
Subject key identifier:   84:8B:0F:03:76:0C:13:1B:08:1C:2F:F8:3A:7F:F0:7D:D8:89:28:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FBF3C362ADCA1821B7C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4192b0c-665a-34ca-94c4-9fb58f3f68bf.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396591
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:bf:3c:36:2a:dc:a1:82:1b:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ddefa0fb-3c13-4100-ad2a-b9ce28ff6c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:66:bd:98:49:ce:ea:9b:68:0e:f6:63:20:
                    db:3d:34:9f:62:40:05:18:f9:70:a4:c5:e7:11:e1:
                    95:56:9d:4e:f7:2a:03:50:b5:48:b9:b9:40:93:5a:
                    22:03:69:a2:eb:be:c8:af:5d:bb:c6:e3:d1:82:85:
                    de:37:75:d7:56:f1:dd:bb:3e:95:4a:40:50:ec:e3:
                    5d:06:af:d3:3d:e4:98:8e:1e:1f:7c:63:5e:72:b3:
                    0e:6a:95:c5:6a:e9:ef:95:ee:b7:10:71:41:5f:0d:
                    57:c9:1c:d6:f2:f7:e7:e4:55:e8:75:9a:9f:83:21:
                    b3:81:c7:fe:12:f6:49:40:1f:2c:b1:64:45:5a:d3:
                    7a:84:ae:e1:77:2d:c5:aa:b2:7a:c5:e2:12:87:03:
                    02:75:a0:33:0b:86:dc:6c:d4:92:98:c8:2d:af:fa:
                    f3:36:9f:10:d7:7e:b6:08:43:75:fa:17:be:ef:d1:
                    a3:83:0e:21:cc:48:86:cd:7e:f7:24:94:51:0d:c2:
                    8f:3f:97:83:ae:e4:80:1a:29:76:b2:28:3d:87:bb:
                    95:33:8b:3c:c9:74:4d:20:02:73:c7:1e:79:4e:e5:
                    8b:ed:7a:b5:60:93:aa:7e:3a:08:b4:e4:48:30:00:
                    ad:7a:dc:6c:ce:fe:b5:da:74:24:26:01:16:90:17:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8B:0F:03:76:0C:13:1B:08:1C:2F:F8:3A:7F:F0:7D:D8:89:28:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4192b0c-665a-34ca-94c4-9fb58f3f68bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:9e:60:f5:f8:1f:75:e1:26:a6:37:8f:cf:69:8c:c5:95:1b:
         bd:c7:6d:d1:cf:a4:43:55:c1:00:68:f8:a3:9c:49:13:7e:4e:
         94:9c:be:9d:69:98:b2:7f:29:a7:dc:9a:fc:31:a2:a2:e0:34:
         89:36:6b:45:48:be:0a:ab:a8:7c:63:fa:55:a0:1c:6c:da:52:
         51:37:67:c4:dd:68:7c:8e:af:9d:c7:4c:7c:e5:b3:f9:37:35:
         2f:dd:d3:f2:f0:b2:c0:11:85:dd:dc:2e:e7:26:8b:1c:a4:1c:
         bd:9f:59:77:1e:8b:74:82:cd:5b:d4:d9:4a:3a:df:9a:91:48:
         c0:31:db:39:96:34:f3:eb:b6:53:d3:e1:c0:64:7c:35:f7:d0:
         20:be:d9:c7:b9:24:f6:dc:c7:7f:ef:29:67:d2:a6:b4:e1:e9:
         fb:ff:82:7d:ee:bb:2a:b7:6b:d4:61:d1:f9:6f:09:34:a4:41:
         38:fe:d5:7b:42:b1:bb:05:77:59:08:e7:a3:dc:a2:27:c8:bd:
         22:ef:a3:f6:cb:72:89:6f:a3:60:61:45:90:8f:b8:b1:cd:0b:
         e4:eb:ca:56:ef:67:29:75:68:23:9a:81:02:f7:0c:84:73:6c:
         0a:f2:df:ee:a4:25:eb:69:3d:12:c0:29:7e:da:41:d9:72:6f:
         77:3e:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:45 2026 by rpki-client