Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
File:                     b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa (raw, json)
Hash identifier:          LJz8khkx3BE1e4kvXgcmoyBv0uBShsz+lWPxIOY1vtQ=
Subject key identifier:   09:50:00:08:75:41:F2:CD:A7:DE:61:69:57:C5:2E:76:BB:2F:81:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64EFE043114086014F3A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396544
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ef:e0:43:11:40:86:01:4f:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=d92e5ccd-1b46-4582-a589-fcad26b632e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:c5:51:92:e0:42:85:0f:43:95:11:a2:a4:
                    0d:15:d4:02:c4:95:9e:21:b1:61:54:0c:be:0b:16:
                    c9:ac:e3:ef:93:3f:15:81:bc:6a:3a:1c:c0:9b:51:
                    8b:9e:bd:27:05:08:39:e6:e2:3b:03:4f:83:05:44:
                    2b:f8:db:6c:7a:53:ec:69:af:b6:b7:bf:9b:80:c9:
                    aa:0f:e4:85:c3:2b:32:29:a5:5b:cf:a3:29:16:d2:
                    b4:e7:ee:26:b9:16:6d:14:0d:1c:1a:0c:c1:c8:4d:
                    65:75:e9:1e:ea:50:a3:88:29:19:2e:71:55:9e:a9:
                    a8:7d:62:a2:98:a6:e5:8b:d0:80:f6:d4:ca:af:82:
                    71:41:5e:95:21:2b:9d:78:7c:14:a9:83:d7:dc:97:
                    7b:89:78:af:03:5f:5c:5c:5c:61:66:be:88:1c:09:
                    35:b1:67:83:19:f9:1c:61:6b:26:a6:d5:0e:94:dd:
                    22:17:17:0b:bd:b1:9a:bc:b4:9a:8b:39:5f:34:8a:
                    7c:cf:e7:2f:f1:be:e4:71:2d:b0:fa:9a:f4:5b:e7:
                    04:79:02:13:df:8a:d4:ba:15:73:3d:c3:c5:f2:9d:
                    9f:e2:cd:7c:ef:9c:df:19:a3:91:34:7f:42:f0:95:
                    65:60:7c:8d:5c:e6:8c:26:b7:68:d2:35:1f:c4:b6:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:50:00:08:75:41:F2:CD:A7:DE:61:69:57:C5:2E:76:BB:2F:81:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:4b:57:c1:33:37:95:9a:b3:38:a1:b7:ba:83:df:e2:0a:
         12:22:cc:fc:d5:01:4e:ca:b5:b8:19:ab:38:b0:77:65:cf:85:
         62:89:e1:a9:33:cd:e0:66:37:05:ae:7e:64:cc:2d:09:96:e6:
         77:07:07:b3:03:34:60:d2:49:87:d0:72:01:b3:04:99:13:53:
         34:80:88:44:e8:fb:c0:a9:f1:31:ef:89:dd:65:7f:50:51:9d:
         45:ca:54:5f:9f:06:16:d4:c4:05:57:5e:a3:ca:be:ba:d5:67:
         e4:71:71:fd:c1:80:fa:11:08:f4:58:4d:45:6c:1e:a5:01:5b:
         d9:39:22:70:7c:95:9c:92:0f:28:e7:c2:ab:cf:78:3c:75:6c:
         74:d5:15:da:ec:d2:3e:0f:ab:20:17:a8:77:a8:01:bc:1a:30:
         4e:da:33:fd:bc:ab:5c:3e:db:16:6e:c1:34:c6:cb:9e:15:d8:
         dc:cd:24:65:4d:49:55:40:12:d0:be:d6:0e:c7:88:bc:ae:35:
         d4:4f:4b:db:69:d0:20:71:8e:61:24:7b:18:41:50:fc:9d:d3:
         01:9d:ee:76:67:b8:73:e4:37:2b:2d:c1:4f:2f:6a:27:42:91:
         c9:04:01:c4:cb:40:f5:c8:c6:ba:0c:e3:d8:56:ff:33:2e:57:
         7b:32:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:27:23 2026 by rpki-client