Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4e8263-8ed8-32b9-a0b3-b6863865177a.roa
File:                     da4e8263-8ed8-32b9-a0b3-b6863865177a.roa (raw, json)
Hash identifier:          h5JKk1k1l8A9CRdCuWKaRKBR/s+pvzCwPrQgjCtSzsM=
Subject key identifier:   53:60:AA:D6:4B:9C:3D:C0:D8:B8:E5:05:43:BD:53:2A:E3:7A:ED:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E736A2DE9A7235A0E412C6C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4e8263-8ed8-32b9-a0b3-b6863865177a.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     36620
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:2d:e9:a7:23:5a:0e:41:2c:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=b236cde9-fd79-496f-a21c-dfea8d1066e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:87:aa:43:ff:1f:d1:19:ec:a3:7f:ad:0c:
                    5d:1b:a9:a7:d5:fa:54:70:5b:61:e6:c9:c0:5d:ff:
                    3c:6f:26:d2:6b:a1:31:d8:ea:61:2b:db:f7:ca:67:
                    2e:94:2a:5e:b0:71:71:d7:77:92:89:a3:99:3d:b6:
                    3c:8a:e6:aa:d9:d4:7d:55:fe:49:09:b6:45:12:25:
                    0e:9e:4d:7a:28:a9:10:7a:b8:45:d8:0b:ec:33:0b:
                    eb:50:e7:e5:40:94:ef:07:7c:eb:5b:31:bf:db:4c:
                    b6:9a:e0:03:7f:0b:59:7e:8c:69:b9:6e:db:2d:ff:
                    3f:89:e7:2c:02:40:38:d8:20:18:93:3b:8a:49:8a:
                    27:cc:b1:ca:ec:f0:ed:d7:78:26:a1:9c:20:e1:48:
                    3f:ad:58:4a:aa:6f:54:8c:9f:37:8f:54:66:d4:b3:
                    3e:44:3d:8e:03:a3:8e:36:d4:23:57:fa:76:84:b2:
                    c5:2d:bd:d4:39:9f:2b:2b:10:f2:51:66:0c:3b:6c:
                    ff:8d:95:6e:ee:f0:fc:fa:88:e0:31:6b:51:97:89:
                    bf:f5:f7:73:81:31:b8:61:f9:79:80:c3:df:f5:b9:
                    35:1b:17:cf:aa:00:52:c4:70:b0:ef:fa:31:60:97:
                    ea:25:eb:69:56:60:4d:50:e6:05:a4:87:45:31:0c:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:60:AA:D6:4B:9C:3D:C0:D8:B8:E5:05:43:BD:53:2A:E3:7A:ED:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4e8263-8ed8-32b9-a0b3-b6863865177a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:69:c3:b1:1f:d9:14:ef:6d:69:cf:35:a3:0a:8e:6a:c2:f7:
         e6:1d:a5:54:97:0f:1b:cf:a2:ef:fc:af:9e:5a:49:d0:cc:e0:
         f9:6f:f1:2f:dc:a2:f5:71:ed:69:fa:6e:3a:c2:b1:cb:c5:a7:
         9f:0c:c0:86:b1:bc:25:85:24:87:4a:8a:70:3a:00:cf:7a:82:
         93:d0:5b:db:a2:b9:98:b0:f1:be:87:57:7f:ec:32:f7:db:ac:
         79:5b:d0:9d:e0:81:b4:db:da:12:23:8f:a2:10:c7:41:15:7b:
         cd:f0:cb:73:9d:0f:6d:19:5e:cb:1b:4b:e3:89:64:bd:11:30:
         c0:92:67:d4:51:f1:ae:28:a0:a4:20:c3:72:2e:20:83:1f:0e:
         ad:e7:fc:d0:f1:ce:00:42:32:70:3e:cb:ff:66:44:f7:5c:89:
         07:68:7a:ad:65:19:8f:f1:a2:30:6d:5c:06:87:a6:68:35:a5:
         32:65:da:08:2a:87:52:3f:65:31:65:09:3d:25:55:27:33:1c:
         9e:1a:6f:95:4f:6b:ae:0d:5c:34:47:be:9d:dd:49:91:c3:ba:
         8a:5e:24:50:c5:7b:6b:a4:b8:12:8c:1b:6a:7c:85:c1:48:39:
         2b:ec:1d:b9:3c:2a:6b:79:33:b5:a8:18:e1:85:7b:61:ec:87:
         2e:e2:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:16 2026 by rpki-client