Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd960078-1831-3b87-916c-9dc921516ade.roa
File:                     dd960078-1831-3b87-916c-9dc921516ade.roa (raw, json)
Hash identifier:          uP4D+a+I3ideEQT+3l9SQDRfyXjK+jAG5bw5akD+FeE=
Subject key identifier:   B5:7E:D2:AE:19:E7:49:58:F3:88:BC:77:71:13:EA:87:4E:B4:18:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5A4A17F1F9BFEC9DD6394000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd960078-1831-3b87-916c-9dc921516ade.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     396575
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:17:f1:f9:bf:ec:9d:d6:39:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=06589959-5121-4d3d-a167-ceff8f689aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:02:49:50:bd:f6:fe:62:59:54:be:b2:28:
                    6c:0a:27:4f:2c:66:fe:06:44:fa:73:0d:32:63:b9:
                    d3:5b:89:23:c2:0d:e9:58:cb:5f:ba:a2:f4:08:a7:
                    9f:bd:9c:aa:73:c1:c4:fb:c8:05:8d:5c:0e:c5:7f:
                    dd:a8:7b:fa:d8:9c:2b:f1:c4:04:16:10:69:fd:c9:
                    8d:53:ea:a7:66:68:c2:e4:b2:d0:26:1a:7d:18:b7:
                    20:f3:53:98:1e:a6:61:85:c4:21:7c:d7:06:b0:73:
                    a5:68:c9:48:3d:20:30:42:64:5c:12:bf:43:3a:75:
                    76:5f:fd:8f:2d:d3:5c:11:8e:a4:1d:16:d1:fe:0d:
                    a2:e1:a8:89:12:3c:69:16:8b:54:b9:a9:2c:8c:21:
                    37:b3:02:be:cd:be:61:ec:51:69:88:64:10:48:2f:
                    f0:26:28:b5:eb:73:fd:d6:4a:87:47:d9:9b:7c:c0:
                    bd:4b:b5:fa:48:1e:59:2c:ff:0a:aa:a0:71:fb:4b:
                    ca:84:38:47:68:9a:12:ea:f8:8e:5b:c8:f3:c4:5d:
                    0c:e6:45:9f:b9:bf:f1:46:46:7a:72:57:4d:b4:a9:
                    72:cf:71:da:c7:2c:14:be:c9:ce:a5:76:f2:5d:8c:
                    2c:2b:0b:7a:da:1d:30:c2:9d:5f:4e:03:e5:eb:6c:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7E:D2:AE:19:E7:49:58:F3:88:BC:77:71:13:EA:87:4E:B4:18:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd960078-1831-3b87-916c-9dc921516ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:48:3f:62:13:93:f3:92:56:9a:c7:3e:3c:3c:09:f4:d6:17:
         e0:93:bd:e3:35:e7:66:31:4b:78:0a:08:6f:f3:26:34:58:26:
         e5:33:41:ee:e1:7e:be:bd:52:f2:64:70:c0:d3:00:83:44:1f:
         fc:3d:b4:41:0e:eb:41:20:ae:ee:03:a1:19:a3:c5:d0:d9:c2:
         92:45:d7:90:12:08:a5:31:2a:09:99:5a:9f:df:80:e9:31:b1:
         20:7e:32:61:d4:70:2c:71:68:f1:c3:09:c7:32:bf:c1:a5:14:
         0d:b2:20:f4:b9:27:05:1d:4a:46:56:39:28:dd:8f:f1:8d:f9:
         94:50:af:7d:33:78:7b:0f:37:23:28:e5:2c:8b:79:ee:33:11:
         c0:5c:c8:78:dd:95:3f:e3:6e:b7:a1:cd:f9:32:8c:25:3c:d8:
         39:4e:ce:a1:6c:48:46:36:e2:84:d7:1a:4a:3e:16:fa:24:f3:
         ee:36:ee:db:8c:75:9c:0d:2d:bc:17:ed:99:ba:87:8c:07:9f:
         55:00:9f:f6:7a:93:3f:d1:28:a1:fd:46:e7:71:aa:86:f6:79:
         b9:75:9b:da:cb:4b:22:be:87:60:fa:24:30:ac:eb:69:e3:f0:
         cb:9b:6b:7b:9f:e0:06:3d:c2:67:91:7e:dd:5e:be:a6:ec:1b:
         8e:fb:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:10 2026 by rpki-client