Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa2f937d-2525-3e64-8cb7-0d692f3429f5.roa
File:                     fa2f937d-2525-3e64-8cb7-0d692f3429f5.roa (raw, json)
Hash identifier:          vNIISBX4z+2hfrxpgjO7uT9I4msnQrmvuif9XfVejCY=
Subject key identifier:   90:E1:81:D7:60:35:B7:53:37:8F:A2:2D:DD:83:47:87:C3:9C:AB:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA5A8BD977601BBD00900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa2f937d-2525-3e64-8cb7-0d692f3429f5.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     20431
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a5:a8:bd:97:76:01:bb:d0:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=d5f399ac-99a0-4aa7-ac57-3109d6dd8a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:c8:d5:c6:94:dc:a2:83:6e:c9:20:54:66:
                    4a:2e:90:a8:2d:98:75:71:0b:ab:42:63:c5:89:b4:
                    82:90:bb:18:83:71:84:ef:c1:dc:a5:13:a9:cb:5a:
                    da:c1:6a:ec:df:df:cf:14:91:df:ff:89:7c:93:af:
                    84:30:10:7f:fc:b8:44:0e:6b:5a:cd:c4:c0:3f:3f:
                    5d:d4:46:3f:9b:70:b6:e3:57:76:9c:38:4b:13:6c:
                    de:34:02:aa:b6:54:81:f9:84:3e:ec:9e:db:bb:ea:
                    c5:1f:e6:0e:a0:46:d7:8a:e0:bf:0d:8b:4c:ca:db:
                    19:56:30:48:cc:9e:0c:fa:ad:aa:67:6e:d5:de:53:
                    c9:c3:6f:da:d2:bf:9b:fd:68:b6:2a:d6:67:ff:67:
                    74:6e:92:1a:86:a2:78:cb:54:cf:57:5d:2b:6b:4b:
                    ec:7e:c9:f1:24:f8:83:cb:1c:ec:8b:27:db:06:61:
                    dc:ef:d6:2b:ad:f9:7e:e6:91:15:e6:c3:71:0a:62:
                    1f:c6:f3:58:7c:29:31:52:87:bf:45:4c:58:1c:20:
                    52:ed:1b:19:db:08:e3:ab:dd:76:a0:2a:bd:6b:5a:
                    f4:62:e7:6d:b0:93:4a:30:59:86:38:16:97:cb:06:
                    42:0a:69:e7:b3:4b:d9:94:e4:e8:41:78:93:5f:0d:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E1:81:D7:60:35:B7:53:37:8F:A2:2D:DD:83:47:87:C3:9C:AB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa2f937d-2525-3e64-8cb7-0d692f3429f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:8d:05:f6:8e:e2:77:49:0f:dc:19:11:11:ff:c6:9b:9c:4a:
         18:b7:b4:ce:ba:0c:80:98:b0:d8:75:a7:0a:c5:01:7d:48:d9:
         1a:ad:d5:68:83:80:da:69:ed:76:05:5d:2d:62:fd:d9:a5:03:
         03:5a:29:fd:5d:1f:f7:2a:7d:79:e4:c4:44:9d:2c:f0:89:f4:
         1a:38:b9:bb:08:a9:16:8e:c1:a7:d9:df:2e:da:40:ea:e1:73:
         93:11:f1:80:96:50:53:90:41:5d:2c:37:2d:ff:d9:48:b9:45:
         58:3d:58:f1:28:6c:4f:24:c5:25:41:52:ec:ba:57:49:55:47:
         86:70:4a:ed:74:c2:13:c5:06:89:e6:23:6d:30:1e:61:be:34:
         55:89:c2:cf:b3:46:3f:86:7a:df:82:1c:f9:18:59:a0:11:65:
         5f:be:f7:0b:37:eb:a3:df:f8:47:e1:27:39:39:f1:d1:8b:16:
         0d:57:18:2b:04:fc:d2:ee:03:80:2b:bd:bd:b8:17:3d:0f:e7:
         bb:af:16:0c:20:f2:ac:f4:35:d4:bb:71:7d:cd:13:c0:50:56:
         d5:54:91:d9:e5:51:e0:c3:8b:61:c0:49:c4:74:cc:8a:cf:c9:
         34:f5:2d:78:ee:5d:28:71:a1:cc:fc:af:3f:4d:48:9f:aa:55:
         b3:43:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:04 2026 by rpki-client