Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b765d1-f04d-34a2-ad77-6e94104966b5.roa
File:                     d0b765d1-f04d-34a2-ad77-6e94104966b5.roa (raw, json)
Hash identifier:          AOJwOcWA7HWIlEiWOJLrlOZTFHKlNka5HyDit+cJRII=
Subject key identifier:   AA:1C:71:8C:FF:59:E1:6E:54:37:04:31:60:71:A7:CC:55:E8:DB:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA3794755B4B04FB89500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b765d1-f04d-34a2-ad77-6e94104966b5.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396590
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a3:79:47:55:b4:b0:4f:b8:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=b8ccbcb3-a35d-4c9e-bc74-b4acb591a3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:b4:78:5f:a0:79:ce:46:b3:0a:7c:45:0d:
                    1b:f2:18:a9:de:da:f5:8c:a3:7d:49:d8:14:09:e5:
                    87:e0:0f:d3:24:ad:61:46:bc:7d:e1:6e:c7:fb:a8:
                    3b:90:92:37:36:83:f2:0c:6a:c8:a2:01:49:30:0e:
                    e5:a7:2a:27:b7:cb:be:39:c5:b2:e6:dd:84:cc:bb:
                    77:d1:e7:a6:93:fa:be:48:40:44:32:7f:f4:fd:20:
                    80:65:b4:a4:f2:67:59:d2:22:45:f1:2d:4d:50:73:
                    f3:c1:2f:63:03:4d:60:27:b5:12:7a:8c:e4:66:8c:
                    14:01:6c:b6:20:b4:19:23:f1:e3:06:39:fc:c7:70:
                    64:32:d8:d7:39:3b:fb:f1:b4:9f:39:da:0d:8a:a1:
                    80:c5:39:0e:9a:9d:66:09:8e:60:24:eb:bb:15:f5:
                    d6:01:c5:ba:0d:7c:57:a8:b0:be:14:74:cc:98:f4:
                    90:70:c2:0e:b4:d2:60:c2:79:f3:73:f0:c7:e5:80:
                    b1:66:9c:41:b8:a3:6f:8b:b5:95:db:8a:98:d2:99:
                    10:5d:4f:48:68:79:b9:dd:63:70:d4:78:26:ee:bf:
                    cf:bd:6a:41:db:3d:9f:ac:7e:96:49:dc:3d:a1:e1:
                    64:ff:5a:e1:65:2a:0b:67:b9:5c:d9:1e:dc:57:62:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:71:8C:FF:59:E1:6E:54:37:04:31:60:71:A7:CC:55:E8:DB:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b765d1-f04d-34a2-ad77-6e94104966b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:28:9f:92:28:af:8e:ba:7b:89:87:0c:eb:93:0f:8f:bd:6d:
         7e:f1:92:22:f3:6f:12:01:99:f5:55:13:1e:29:bd:2f:00:2a:
         dd:5b:29:46:e9:93:36:86:27:46:12:c3:38:d8:f6:6c:14:f0:
         c7:d9:c3:d0:95:9c:b8:08:1e:ae:41:cb:01:f6:bc:1a:c1:36:
         1d:ee:76:dc:92:31:a5:ec:1a:ff:53:68:c7:22:f1:5f:f8:29:
         32:eb:2c:0b:ee:94:ce:4a:5d:b9:f5:ea:42:ee:54:eb:67:01:
         80:92:a8:7d:e4:95:cf:06:6f:60:ac:76:26:47:5f:de:46:6f:
         89:a9:d8:b4:de:90:17:5e:61:7f:ea:cc:09:54:bc:9d:29:62:
         5d:1e:f3:00:7e:95:e1:06:e4:94:e5:d5:b8:32:c4:af:49:32:
         ae:8a:fc:b4:a2:c9:cc:93:34:75:e0:08:34:2b:49:38:9b:01:
         b9:80:78:69:79:4e:d5:cb:6f:59:07:6b:23:ff:b2:29:09:f6:
         dd:2b:77:70:57:4d:ec:ae:48:67:ef:0e:8c:08:b3:d7:ef:29:
         8a:3a:83:ce:d4:41:49:be:44:60:1a:f4:96:a7:2c:08:e1:44:
         b3:12:04:0b:ef:06:7c:1d:6a:e7:28:30:45:55:93:93:7a:b3:
         78:b5:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:30:15 2026 by rpki-client