Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
File:                     d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa (raw, json)
Hash identifier:          bjjccFfvSRazG7Q3kwIX4ouYgskKwGCR13rykBTWcSA=
Subject key identifier:   6C:C1:76:1F:63:0C:D6:BE:49:45:14:13:DF:40:62:87:34:42:27:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64EE31D7251D3D822FBC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     36618
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ee:31:d7:25:1d:3d:82:2f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=c4170f8e-62fa-4143-8d3b-61e38e741a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:6d:9e:37:31:df:80:29:50:81:4e:63:72:
                    e9:5c:34:96:41:6d:f7:2b:a6:6e:20:8d:8e:7f:0d:
                    bd:06:d0:25:d7:a0:cf:db:a0:78:54:a9:43:4c:51:
                    d6:fd:48:68:fd:f9:c6:45:17:81:03:7b:c7:69:21:
                    e6:92:37:0d:97:bf:2b:db:c7:44:62:60:50:e7:a1:
                    06:5e:43:4b:ac:b6:4b:de:61:a6:04:00:c1:f3:99:
                    79:3c:07:1f:7d:d4:0c:70:f5:00:12:52:6d:1d:3c:
                    27:03:af:c3:9b:fb:a0:05:1f:86:bf:a7:a0:fa:68:
                    1b:81:97:6c:f1:c7:87:bb:03:1d:59:e3:4c:26:25:
                    ca:95:52:54:30:f9:61:e6:76:e3:c1:a6:18:07:79:
                    bd:21:d7:ed:b0:95:f5:44:2d:58:40:82:f0:c5:e7:
                    89:65:e3:d3:23:3a:ef:9f:b9:32:98:72:0f:ae:ac:
                    79:ab:2b:26:dd:8f:b2:3b:a5:8d:da:cb:3f:45:34:
                    e4:3a:a4:c7:b7:48:fa:fb:71:06:3b:d9:8a:f4:c0:
                    f3:67:de:ad:9a:5f:ba:57:ab:1e:2e:ba:0f:7d:0c:
                    c3:76:b9:4b:5f:b5:f4:fe:2e:1b:be:f9:b4:1d:99:
                    64:69:d7:c4:30:a3:41:d6:b7:36:4e:56:e3:ce:e3:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:76:1F:63:0C:D6:BE:49:45:14:13:DF:40:62:87:34:42:27:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:3f:84:9f:81:63:1f:14:1f:45:df:0a:e5:57:ad:52:ad:
         1a:3a:1c:01:e7:c5:dd:d8:3a:da:c4:88:ad:58:0d:ca:e2:f7:
         32:ad:92:65:74:cb:02:4a:63:43:98:6f:e9:38:1c:77:45:f9:
         54:8e:7f:32:f3:fc:d5:48:70:05:b5:4c:99:57:fc:e7:80:53:
         0a:55:17:49:b7:b3:50:08:fa:54:4c:5f:e9:72:5c:73:12:7d:
         5c:b1:b8:dd:2c:3d:a5:01:9a:61:87:3c:92:64:22:2f:6e:eb:
         59:22:cc:1e:cc:79:78:77:43:2d:22:c0:1c:c5:9d:e4:19:a3:
         e5:e1:a3:1f:ae:a0:f4:46:c3:3d:24:86:f1:52:e5:54:55:d0:
         fc:a5:f4:d8:e4:e8:34:76:35:35:45:76:8f:5d:5f:01:5e:f2:
         d9:d9:af:42:30:ff:b7:29:e7:3d:bd:be:67:48:3c:1a:3b:00:
         6c:a1:df:34:2f:a4:cd:9a:fc:e7:89:48:7a:df:32:5e:da:66:
         fd:56:28:d3:da:81:d4:34:71:ea:94:34:df:ec:37:a9:f0:c7:
         a0:34:20:a0:c6:21:63:9c:30:f2:e9:87:bc:59:90:cc:4f:7c:
         9e:b6:6e:60:01:6b:c7:78:ac:e7:b9:bc:92:07:f5:20:ec:f6:
         1e:b1:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:26:59 2026 by rpki-client