Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25db196-f507-3531-ba0a-d145e098a693.roa
File:                     d25db196-f507-3531-ba0a-d145e098a693.roa (raw, json)
Hash identifier:          oTcCWJBnso0iBWjPstD+DThwAEtaAwVRFshHka0lRd4=
Subject key identifier:   0A:6C:EB:AE:6E:BF:4C:58:2E:93:2D:EE:76:C2:17:0E:1D:59:58:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E683F5C1606678044C7C5B240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25db196-f507-3531-ba0a-d145e098a693.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     396567
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:5c:16:06:67:80:44:c7:c5:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=fd64e483-9262-461f-a009-d757f24f1426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:9b:ca:91:fc:94:4e:67:bb:a1:20:3e:f7:
                    46:21:66:64:a0:e4:ac:be:a0:3c:0c:b5:16:c1:c5:
                    14:ce:e0:ab:78:c8:c6:04:f2:54:7d:fc:1e:ad:6a:
                    08:b1:35:97:e6:d6:1d:fe:32:c2:13:9e:01:ca:5e:
                    5e:2e:aa:3f:93:6a:f8:09:ab:2b:ce:69:33:41:eb:
                    94:43:66:d6:5b:ae:c1:14:18:63:6d:86:69:91:73:
                    5d:a1:fc:80:ae:dd:e0:6f:fe:60:c7:d2:d4:8a:76:
                    b8:bf:d8:13:5c:9c:31:29:bc:12:b8:45:33:19:c0:
                    10:cc:49:64:45:1d:ff:a8:17:b0:86:72:0c:8a:19:
                    ee:5b:d1:73:44:09:f8:4c:d9:e6:9a:b9:b7:d6:1c:
                    e3:b4:11:fe:c0:02:50:d5:49:51:0c:3e:46:68:8d:
                    7d:06:93:f7:d1:ef:63:57:7f:8f:4f:33:e6:28:5c:
                    8a:f8:3d:d3:b4:bd:ea:46:77:13:52:7b:78:f9:8d:
                    cb:1b:df:59:25:21:40:ef:75:71:7e:ad:2e:54:53:
                    93:b9:03:f0:8b:7a:23:b4:d8:75:17:c5:c2:07:26:
                    4c:4e:f9:90:d8:1a:8f:75:4f:cf:a1:b2:6d:70:16:
                    be:0e:eb:db:62:40:53:40:76:c8:c0:8a:a5:72:62:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6C:EB:AE:6E:BF:4C:58:2E:93:2D:EE:76:C2:17:0E:1D:59:58:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25db196-f507-3531-ba0a-d145e098a693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:81:d6:0f:76:9e:5d:85:a8:52:90:a0:d8:1d:01:49:3c:7f:
         8c:ba:2e:8e:22:81:b6:65:c5:2d:fb:83:97:5f:58:10:83:f6:
         c9:1d:0d:65:3d:d5:a0:32:7c:55:35:6f:ef:89:dc:05:06:4a:
         d5:55:c9:72:3e:89:0e:0c:5e:fe:68:ad:e3:cc:72:a4:f7:e0:
         8c:ef:ea:43:09:9c:82:42:68:4d:ea:37:63:44:b3:f5:32:7c:
         fc:08:bc:3a:1b:71:e3:d3:32:b6:ce:a8:b7:6f:56:5f:74:d9:
         3c:20:8c:2f:82:d7:4e:68:2a:f3:17:d1:5a:a6:56:3e:5a:cd:
         27:36:43:52:80:b9:86:5d:e4:9d:49:36:22:d6:51:2c:4f:cb:
         3f:29:38:97:7d:fc:04:9c:4d:95:1e:9d:19:a2:ce:d7:c0:07:
         a3:5c:c4:1c:13:2f:8d:5b:ca:ba:b5:2c:ae:e4:aa:90:7a:21:
         50:88:e6:63:6c:6e:e7:c0:fb:7b:34:35:04:43:77:b8:5c:3c:
         85:f3:9a:bf:a7:8e:3c:b3:7d:bd:10:26:a9:29:88:fc:b6:e4:
         cf:51:ed:e0:23:e3:71:e7:b2:76:ef:43:84:6e:7c:80:a5:51:
         c2:c7:26:a0:a4:c7:6e:18:ac:d1:78:a0:0b:27:94:0a:e8:90:
         23:bb:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:49 2026 by rpki-client