Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa
File:                     d345e031-7e87-3977-9aa7-6b7e19f3795e.roa (raw, json)
Hash identifier:          mSYH8V6YiLYTRqcBJ90VZ6Bq1/4LojKJ3WqWThJ8wMU=
Subject key identifier:   06:11:DD:37:C2:A6:03:24:01:A0:7C:29:52:01:6A:99:21:78:02:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815FB865C59539845C5D1500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     396609
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:b8:65:c5:95:39:84:5c:5d:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=a10ad3fc-c527-4ee1-9f35-7f56f23602e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b6:27:65:23:69:4b:4d:01:89:bb:f2:8e:b4:
                    32:25:0f:8b:6f:e9:08:53:28:49:7b:03:68:54:60:
                    ae:53:c2:1b:b9:67:10:a5:6b:16:40:8e:f2:31:17:
                    6e:bf:f0:37:10:97:39:b6:53:af:59:e0:5a:6e:17:
                    44:67:87:39:bb:a9:5b:ef:93:52:40:ce:b1:dd:59:
                    86:f7:ff:ce:50:f5:45:fd:4f:96:38:36:c1:71:d9:
                    34:4d:a7:02:be:b7:72:e7:d4:66:d3:02:e2:eb:e5:
                    72:ad:e5:39:4a:0c:44:70:48:b1:13:8c:f0:8a:d6:
                    42:a6:f1:4b:11:b4:2c:a1:52:60:a5:49:cf:2b:50:
                    c6:a9:6f:34:4e:fa:1a:99:e7:48:d5:f5:be:3d:9a:
                    b3:88:50:4b:cd:3c:f5:d6:94:01:ce:20:6f:cb:0a:
                    cd:f5:56:cc:64:10:74:8f:6a:a2:6e:45:f1:5c:f2:
                    e4:be:21:e2:75:6e:2e:06:14:3d:b4:cd:16:e3:7c:
                    a9:b4:8e:fd:2d:00:f1:b3:43:af:c9:d4:ef:f1:7c:
                    12:b1:5a:45:6c:09:a3:c2:78:9b:83:d2:cd:f2:0b:
                    00:17:26:8b:5a:55:81:58:1d:bf:1b:9f:e1:af:f8:
                    01:5f:d2:84:3e:55:fc:1a:27:97:3b:f0:96:b4:6b:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:DD:37:C2:A6:03:24:01:A0:7C:29:52:01:6A:99:21:78:02:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:93:82:fe:9d:e2:68:e2:a5:e7:6c:aa:b0:d3:cc:ec:a4:
         6b:11:a1:c4:ab:98:08:c9:35:e2:6b:1d:76:e9:5f:e6:bc:41:
         fe:05:4f:ff:f6:50:e1:86:e5:38:ff:9e:19:74:05:9c:ac:d2:
         26:05:0e:35:9c:56:08:41:a0:5c:75:27:ec:9d:11:08:29:a5:
         35:da:72:24:84:11:c0:38:01:23:ac:13:41:ed:c5:59:ad:5d:
         12:c4:7e:29:40:5a:30:2a:a5:a3:c5:c5:83:71:51:d4:a7:0d:
         86:18:9b:58:44:19:0d:cc:cc:70:87:af:66:cf:ae:b7:9c:a9:
         10:79:39:b5:26:a8:7c:a5:37:a7:c5:5c:ef:37:a5:0b:3f:5f:
         d9:2d:09:0a:c4:59:d2:86:79:f3:4d:b2:09:12:06:98:07:a7:
         8a:aa:ef:b2:b1:55:22:1f:fd:b8:14:fe:1a:4b:4a:4a:00:08:
         54:37:71:91:b7:b8:fc:ef:96:7a:28:8b:f6:23:17:23:bc:c7:
         5c:ed:b7:4a:87:99:28:e5:f6:6b:8a:21:b7:34:e3:58:b2:72:
         5a:b6:02:ba:5d:43:2a:bf:ee:14:41:e6:98:ce:d5:82:e1:d2:
         56:eb:1a:22:ba:18:7b:c8:0d:3a:8a:15:ab:96:67:82:b0:2e:
         26:97:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:13:13 2026 by rpki-client