Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c22e927b-9af9-3223-a034-0a5a257ddcd7.roa
File:                     c22e927b-9af9-3223-a034-0a5a257ddcd7.roa (raw, json)
Hash identifier:          ReQUJzqCgy0uMZMsmlMQq5cP9XXlmot56pV9Eej/KJM=
Subject key identifier:   83:B3:97:05:B5:92:67:A9:12:CA:F7:93:1C:17:8C:42:5A:25:6A:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E683F655CFEE39CD55FABF900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c22e927b-9af9-3223-a034-0a5a257ddcd7.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     396613
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:65:5c:fe:e3:9c:d5:5f:ab:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=61706a4f-a791-4a8e-818d-53501059fa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5d:0c:41:14:47:35:93:3a:08:f2:f8:64:ba:
                    8e:b6:91:06:a1:e1:80:43:d8:d6:f1:c8:e7:fc:83:
                    f0:31:49:0f:4e:e9:2d:e0:ef:74:cc:49:7e:dc:03:
                    d0:10:13:0c:5b:76:45:2a:04:a9:12:ac:60:92:21:
                    1e:88:03:19:9f:4a:b5:6b:bf:27:f1:2c:95:86:ba:
                    a4:54:d9:83:fc:bc:fb:80:ae:79:58:d4:b2:7a:f9:
                    7f:9d:3c:be:d7:22:32:7b:62:e5:52:34:f3:61:00:
                    19:5c:26:fa:b5:47:92:44:52:52:ea:e9:94:18:10:
                    54:e7:e1:af:fa:e2:17:6e:00:f4:bd:07:ff:06:a7:
                    59:a1:ec:b5:dd:1f:61:0f:d1:4a:ad:8f:8b:9f:30:
                    0e:3a:e1:48:2b:c3:cf:7c:8b:4b:5b:a8:94:9d:3b:
                    6f:ab:18:b1:14:cb:d5:d8:06:29:4e:33:21:e2:ee:
                    ba:7b:8a:43:d7:1b:9d:0c:32:8e:14:b6:a7:37:9c:
                    f1:b1:1e:fc:af:07:b2:2d:28:23:96:e1:c3:75:86:
                    bf:70:26:22:aa:91:9c:70:cf:d0:b8:11:7c:8f:14:
                    d3:b5:0e:3f:0b:8c:4e:59:76:d9:ee:c8:bd:bb:49:
                    2a:93:6f:24:56:04:ba:23:46:b0:8f:03:6c:16:3c:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:97:05:B5:92:67:A9:12:CA:F7:93:1C:17:8C:42:5A:25:6A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c22e927b-9af9-3223-a034-0a5a257ddcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:15:9c:ad:68:d3:fa:05:3f:2c:49:80:68:9c:70:28:c0:
         ce:0e:e6:0e:07:ec:67:8c:9d:a6:c9:80:5d:11:97:aa:22:1f:
         63:57:8b:32:cd:37:a5:15:a2:a0:6a:25:f3:4a:83:c9:9f:8e:
         03:b1:24:b3:55:68:c3:f1:d0:c5:58:6a:bf:d6:99:1c:7b:13:
         92:ea:b9:af:71:7c:d9:f4:bd:e7:ac:37:06:54:66:e0:ca:42:
         24:79:04:b8:e1:89:d1:7b:ed:79:26:82:47:01:ae:13:58:a5:
         0f:df:f9:ab:a4:8b:d9:3f:42:9b:16:52:5b:02:ca:b9:cf:ce:
         3e:00:83:4f:a7:5b:e1:c9:fc:10:e6:46:df:4e:56:60:db:18:
         27:ba:a9:ca:b7:d8:d9:0f:66:80:da:21:3b:38:e4:2e:bc:35:
         05:ee:4c:41:2d:13:10:d1:07:0d:17:fa:75:37:76:1a:5c:23:
         62:91:67:1f:a9:95:8e:44:19:ef:ce:cf:f1:5b:67:56:7c:06:
         51:3e:b3:63:ab:21:fe:60:e0:74:e7:d8:ce:d8:de:05:55:81:
         0b:84:a2:4f:d5:d1:fc:6a:0e:5e:12:d6:34:da:6e:48:8e:3a:
         bd:59:44:2b:23:bc:bf:9d:24:4e:c5:54:cf:90:9b:1c:7d:df:
         66:d2:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:13 2026 by rpki-client