Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc894a1e-b3a1-3f9b-aaec-f680da16077b.roa
File:                     bc894a1e-b3a1-3f9b-aaec-f680da16077b.roa (raw, json)
Hash identifier:          rUWQsG3HSl9JXY7cLsgUBPk2fZs8/1cKrDi/x7GwPU0=
Subject key identifier:   C8:C3:83:EB:EB:A3:62:86:01:40:5E:7A:C4:36:B1:64:A1:61:99:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E683F625AACBC12C4D7464180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc894a1e-b3a1-3f9b-aaec-f680da16077b.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     36619
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:62:5a:ac:bc:12:c4:d7:46:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=45627c66-ee8f-4b76-8a22-814202282f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:1a:53:8b:d4:96:74:60:34:b3:6d:18:16:
                    72:de:af:c9:2e:ec:8b:f5:5b:5a:95:24:5a:73:00:
                    fc:82:51:d7:32:c0:4d:ec:e6:92:0e:cb:a2:d1:59:
                    83:03:e6:78:96:34:72:5c:26:65:15:1c:e6:5f:a8:
                    38:de:a6:bc:ff:2b:a2:71:93:e5:20:fb:1c:89:19:
                    3c:74:c9:1d:77:74:aa:75:a9:f0:cb:6a:2d:21:fb:
                    9a:38:65:20:9e:29:25:0f:e4:8e:12:8b:ce:42:c8:
                    d4:a2:e7:64:3d:c7:98:64:e9:f3:13:99:5c:79:b7:
                    c9:2a:84:86:82:97:da:35:89:f0:1f:75:0a:42:7a:
                    cc:89:be:37:e4:72:24:26:6f:41:0b:15:d6:bb:df:
                    52:da:7b:48:de:8d:af:ec:f5:49:ec:e2:57:58:32:
                    c5:64:65:62:a0:f0:06:67:d4:d8:f0:f1:96:3f:4e:
                    93:ff:b8:a0:f9:94:74:11:f8:f0:0c:5e:07:d6:dc:
                    00:83:43:02:b6:38:ab:69:88:5c:74:80:bf:bc:96:
                    20:92:fb:5b:9f:8b:be:11:d5:71:51:e9:70:47:c7:
                    fc:07:d6:a7:a5:74:c0:41:04:f9:ee:69:38:10:97:
                    2f:d5:32:3f:5a:1b:79:ff:12:e4:7c:be:3d:07:7e:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C3:83:EB:EB:A3:62:86:01:40:5E:7A:C4:36:B1:64:A1:61:99:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc894a1e-b3a1-3f9b-aaec-f680da16077b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0e:6b:60:50:7b:cb:3f:0a:5d:11:10:a3:0e:d7:f0:76:81:
         14:2d:69:9a:64:d2:49:00:ee:c6:68:ab:d3:46:e6:f1:43:9a:
         31:a7:bc:d4:94:03:de:89:4c:b4:b6:81:83:66:5f:21:0b:86:
         65:29:3c:45:ff:4c:49:13:94:1f:6d:77:17:2d:69:61:02:ac:
         97:49:3b:4c:cc:cb:f6:9a:f5:bc:2e:53:02:58:76:fd:99:f9:
         da:25:4e:c8:52:37:f9:09:42:2c:12:74:57:2b:e1:e9:05:e7:
         00:46:1d:22:25:aa:88:f6:77:52:72:52:b6:7a:1c:b8:ac:4c:
         3f:b8:ad:5b:b8:32:0c:7c:83:5e:39:8a:b9:ce:50:4d:a1:bf:
         90:e9:1a:c5:0a:fd:fe:fc:d7:73:b1:3e:b0:0c:a2:59:5e:7e:
         92:19:bc:19:c1:96:0d:82:7b:6d:8d:57:1a:38:16:9f:97:70:
         bc:b1:b4:8f:fe:07:c4:a1:71:6b:4a:7f:9b:ef:63:7d:57:60:
         bb:61:9b:f3:32:a9:12:b3:e9:69:33:b9:ec:cb:21:eb:98:f0:
         71:21:99:a9:51:90:39:46:7f:61:46:81:27:5f:1a:30:da:1d:
         17:9d:a7:af:eb:45:19:ef:68:35:69:71:f4:2f:f0:6b:df:c6:
         b6:8a:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:36 2026 by rpki-client