Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed97ac7d-1d66-3fae-adca-dd521d7c2c77.roa
File:                     ed97ac7d-1d66-3fae-adca-dd521d7c2c77.roa (raw, json)
Hash identifier:          CET9ACCyNAh2jo7LsGBLPspnz18AFzozlBuVxHDNlIw=
Subject key identifier:   43:31:EA:B7:57:5F:E2:09:33:8E:5B:A8:D0:FF:A1:A0:77:44:F0:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DCDC5CB0E761FC43AF7EE8580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed97ac7d-1d66-3fae-adca-dd521d7c2c77.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     396594
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:cb:0e:76:1f:c4:3a:f7:ee:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=c9913be1-54f5-4037-a90e-1228e01b0044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2f:9c:65:03:ca:f1:05:79:13:f4:dc:90:2a:
                    83:47:a6:a6:53:a1:2b:8d:53:c6:78:e0:f6:d3:7b:
                    df:7e:70:bb:e6:ca:f0:fb:47:31:2b:10:a5:12:bc:
                    18:33:4f:fd:a3:c6:b8:f0:84:62:e7:39:96:1f:72:
                    aa:7c:72:54:83:6b:b9:cf:1c:10:b4:f0:7e:ac:3c:
                    11:c1:a1:8f:8e:58:51:65:f8:76:fb:10:d8:94:9e:
                    3f:0c:f4:62:fb:03:21:5f:76:d0:85:e0:8c:2f:91:
                    88:cd:9e:45:a3:e4:14:fc:1e:09:1e:d4:70:25:b5:
                    f5:e7:c7:e6:6c:d5:2a:0f:0f:40:74:fd:37:ad:ba:
                    0a:74:0b:70:94:2b:d6:34:eb:68:73:7e:a9:a3:64:
                    9c:a4:38:7f:7d:ff:9c:aa:51:4e:86:26:fe:26:c6:
                    50:4d:61:41:f4:a0:10:73:17:00:eb:62:44:a3:6d:
                    50:cd:08:56:d4:5a:f6:ca:32:25:97:3f:55:e7:04:
                    60:d3:b4:d6:a4:31:61:cc:42:ee:eb:53:a4:0a:05:
                    16:82:41:99:ea:63:15:0d:eb:14:e3:4f:c6:24:b9:
                    31:bb:7d:c5:bd:a8:1d:16:e0:dc:db:73:ca:64:7e:
                    24:3d:83:36:4f:0e:55:66:16:f5:ec:97:d3:68:8e:
                    54:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:31:EA:B7:57:5F:E2:09:33:8E:5B:A8:D0:FF:A1:A0:77:44:F0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed97ac7d-1d66-3fae-adca-dd521d7c2c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:91:94:62:85:d3:d4:31:02:31:29:5e:5e:5d:96:dc:64:18:
         d9:96:dd:f4:34:8b:26:89:91:20:38:d9:e0:c2:a8:49:47:20:
         6f:47:2d:a3:c6:19:2e:f3:52:86:ef:06:55:48:a7:6a:da:70:
         55:0b:f5:ad:82:c8:4c:2e:a2:bf:d8:85:27:34:8f:e2:7c:8f:
         9d:0f:0e:38:64:48:33:ee:c2:bf:e6:97:4a:ae:43:e0:f9:a5:
         53:1a:40:ae:e3:3c:66:be:24:f5:08:3e:32:03:5b:b6:e6:85:
         89:24:7d:b3:8b:d3:31:d1:ba:30:0e:57:b3:32:27:f6:aa:f1:
         b2:15:e8:f8:b9:12:dd:f3:2a:e8:40:9d:9f:f8:ab:59:2e:c4:
         f9:7d:52:79:01:c6:4e:0d:9e:96:7f:ed:b6:b4:ad:3a:ae:3d:
         12:53:1b:af:c2:4b:06:b2:f4:1b:d1:0f:c5:bc:7d:21:0e:f8:
         20:ff:7b:8b:1a:9a:ff:f9:35:ea:a8:73:bd:16:8b:40:50:71:
         d9:78:9d:d0:b2:cb:a4:b9:51:07:8b:3c:80:17:12:93:0c:1e:
         9f:87:8d:e1:92:7d:d9:59:2c:52:ce:e5:98:91:10:06:ff:1a:
         f2:88:df:d6:86:0e:69:ba:50:fa:29:48:8c:fb:24:ab:e7:d5:
         b9:f9:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:49 2026 by rpki-client