Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d29a002e-4ab4-3d9f-b869-3a4f5fe17ca3.roa
File:                     d29a002e-4ab4-3d9f-b869-3a4f5fe17ca3.roa (raw, json)
Hash identifier:          0jMG48N1xyiVG457r2VFZg1aSKrpYKkER88QcxUmKrI=
Subject key identifier:   26:30:8F:25:33:99:49:8D:E3:95:C5:E6:3F:2F:C5:CC:08:11:9C:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E736A321736855F4D96EA6680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d29a002e-4ab4-3d9f-b869-3a4f5fe17ca3.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     36629
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:32:17:36:85:5f:4d:96:ea:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=2a9669cd-616c-4ffa-b25f-9d8390c2fc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:ea:60:37:b1:52:94:ab:7e:2c:28:36:8c:
                    0c:d5:02:99:70:f3:c5:e0:35:17:63:b3:81:66:46:
                    3f:f6:ba:02:70:b2:4c:9f:73:64:9e:0d:22:66:ce:
                    b2:52:cd:7f:e3:1a:4a:c1:c9:fe:dc:45:ea:67:41:
                    2c:b2:b8:f2:bf:de:23:b9:1e:c4:2c:f0:be:ed:18:
                    67:a7:9d:ad:3e:17:e0:23:1d:81:f7:39:a6:c6:7e:
                    59:82:a7:9e:90:64:b3:85:e5:15:fe:f6:7d:e9:41:
                    73:a7:aa:e5:75:04:73:9e:15:60:98:ec:14:55:c5:
                    ad:57:8d:1e:ab:d4:71:df:dd:57:f5:48:07:40:8d:
                    67:e2:43:60:2e:97:08:04:06:86:75:ee:0a:9f:98:
                    fd:2d:b6:b8:8a:d7:03:19:bf:52:5c:24:60:24:88:
                    eb:2f:5e:ca:5e:a2:d2:c1:fb:80:49:49:f4:4f:3d:
                    65:f8:22:71:d5:64:c0:32:18:f1:d0:a2:c6:9c:da:
                    14:53:71:7b:12:ae:ca:92:d6:a6:60:17:a9:8b:42:
                    71:dd:e6:5b:8e:ee:46:1c:7f:9e:49:83:19:65:c2:
                    b5:f8:e2:db:71:f8:4b:68:f4:5d:46:20:a2:15:b5:
                    ae:55:06:88:f7:9e:f2:62:79:b9:ae:37:e0:46:24:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:8F:25:33:99:49:8D:E3:95:C5:E6:3F:2F:C5:CC:08:11:9C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d29a002e-4ab4-3d9f-b869-3a4f5fe17ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:5d:7e:e2:56:49:49:af:69:04:a3:4c:36:c3:89:f4:02:
         03:27:8e:a9:da:02:c0:8f:0d:5b:b9:13:8c:7e:e2:d1:12:21:
         04:c6:61:fe:a6:fc:47:e8:37:82:3c:a0:df:63:fa:7c:3f:26:
         61:4a:bf:f1:38:b6:23:0c:08:32:73:a0:ed:d6:ad:64:4d:22:
         eb:e4:97:17:c1:e2:90:3e:c7:a8:bf:95:9d:e7:78:54:e4:de:
         fb:9b:7b:c8:a0:9e:5c:1b:a6:4d:4c:5f:69:47:63:a4:b8:a2:
         a8:bb:05:86:4e:a9:4b:1d:23:c3:9c:bd:28:ae:73:58:ea:e6:
         a3:1f:42:6f:f5:63:bb:d4:d0:44:6d:86:fb:80:e5:32:a4:9d:
         ec:ae:00:ae:fc:d7:92:70:5b:f5:f9:e6:f2:95:50:15:0d:29:
         74:13:26:9c:73:a3:69:46:ca:e8:5f:46:4d:e1:b8:ba:d8:18:
         eb:29:26:61:b6:b4:0d:c0:5e:8e:e0:79:a0:61:90:66:79:9f:
         cb:c6:54:19:e9:6d:54:f6:30:00:88:ab:48:73:0c:e6:66:01:
         c8:93:f1:fe:91:17:83:2a:c8:7a:98:05:92:fd:0f:8e:f8:ae:
         5c:8f:05:56:8d:e5:bd:2d:90:6b:c5:1c:6f:0c:0a:2f:64:9c:
         76:aa:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:24 2026 by rpki-client