Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5ff5c23-4c93-3a36-8262-9a22e1ad0c76.roa
File:                     f5ff5c23-4c93-3a36-8262-9a22e1ad0c76.roa (raw, json)
Hash identifier:          Y3GYsIv52pF2+6JFcm9jZxXz9XRCkL0HvIBnKqDlPa8=
Subject key identifier:   97:96:C8:3E:85:AD:73:80:7C:69:CE:34:01:C8:48:96:94:97:EC:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6C6F6D0C5638D0E8C665B660
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5ff5c23-4c93-3a36-8262-9a22e1ad0c76.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     22547
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:6d:0c:56:38:d0:e8:c6:65:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=edf52089-4d5f-4770-aad1-73337e9012a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:62:61:d4:cc:99:4d:b7:16:bd:82:27:f2:
                    8a:bc:0d:5a:e3:08:70:07:36:bf:e9:48:49:45:2c:
                    f9:bf:e9:6a:86:04:b4:2f:36:fb:16:f3:4d:71:2e:
                    e4:9e:62:f8:66:3f:1f:75:c3:a1:46:b7:60:99:d7:
                    91:90:07:d9:75:42:60:38:76:6f:50:4c:17:de:c5:
                    61:dd:ef:07:b6:de:81:21:2c:af:df:9e:17:4a:71:
                    8e:44:46:f2:a9:98:ef:c4:31:11:88:5d:7d:a1:70:
                    bf:f5:60:d8:97:d9:d7:19:c2:28:0a:ba:57:3a:5a:
                    ea:0b:24:5b:3b:c3:f8:91:10:03:6e:38:48:cd:c9:
                    1c:ce:78:b9:f1:c3:6e:84:76:51:9c:d4:f8:99:fa:
                    b1:75:7f:bd:80:75:ae:89:90:de:1c:ac:07:d3:0c:
                    8c:1b:da:f1:5d:b2:4b:03:59:9d:b9:26:a1:28:a8:
                    cd:c3:f4:97:27:a7:32:a5:52:da:77:06:2f:9a:eb:
                    41:a8:54:aa:4c:47:ca:12:ae:b2:35:0e:17:84:30:
                    27:5c:40:4c:33:7f:c9:cd:17:09:09:2c:07:25:b2:
                    74:a5:bf:a3:0a:b1:86:c0:dd:84:17:a6:1c:f5:22:
                    8b:64:fc:60:ca:4c:cf:49:a3:98:0d:db:00:fd:ef:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:C8:3E:85:AD:73:80:7C:69:CE:34:01:C8:48:96:94:97:EC:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5ff5c23-4c93-3a36-8262-9a22e1ad0c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:c6:8e:d2:a3:4f:90:40:cb:eb:f9:08:65:86:8b:05:3e:
         15:0a:4f:eb:2d:4a:7a:50:f5:2e:85:4b:a7:59:3e:97:89:36:
         15:d6:52:ee:2b:9d:27:6a:fa:d8:96:b2:7c:1b:23:61:ad:d9:
         69:df:72:93:aa:e3:19:0d:30:90:e1:1b:e7:7a:a5:fa:68:46:
         4a:6e:18:df:31:2f:5f:ff:f3:3e:42:98:3f:bc:d8:e0:df:25:
         22:c5:99:6a:62:39:ec:17:16:16:91:e3:64:c6:e7:87:7d:05:
         30:40:f5:8f:94:ac:03:b7:05:1c:46:01:06:00:17:c3:10:86:
         38:dd:39:b6:54:c5:d3:ed:7f:59:2b:2f:e1:47:24:e1:06:d8:
         a9:d4:6c:43:23:ac:3d:e3:44:eb:05:90:f9:4c:60:64:73:f8:
         2a:da:c1:22:88:6e:7a:19:97:51:a8:56:2f:d1:8a:f8:e2:ee:
         c4:51:7f:e5:59:58:53:3a:cf:6e:f3:66:18:8a:05:54:be:49:
         67:40:95:c8:2a:c6:71:a9:bc:64:50:49:0d:4b:fc:00:d2:44:
         78:43:bf:3d:47:27:71:56:3f:d7:84:55:d1:a9:85:61:c3:62:
         07:43:9c:59:04:fa:ef:52:cc:0a:73:73:e8:cd:64:29:74:57:
         66:93:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:18:17 2026 by rpki-client