Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e564b91-bea1-399b-a487-9c1ab5a44781.roa
File:                     1e564b91-bea1-399b-a487-9c1ab5a44781.roa (raw, json)
Hash identifier:          7U9X6bpS5ksQKAnijfWo7SYYK4BBh9Ul9OEFK295s+U=
Subject key identifier:   AE:1F:60:91:8C:9B:EE:95:D3:B7:AF:55:2D:75:28:49:32:83:2C:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788B27C224CCF7EE6A75A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e564b91-bea1-399b-a487-9c1ab5a44781.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396575
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b2:7c:22:4c:cf:7e:e6:a7:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=754797f8-7a18-4330-8254-5095cd6e1705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:0b:0c:ea:c4:e1:5e:df:27:61:75:a9:33:
                    56:d0:c0:6a:33:a2:33:fc:86:21:10:18:28:a7:3d:
                    7a:a8:14:6f:f0:9a:58:ee:74:f7:00:30:90:f5:cb:
                    8f:d9:a8:31:71:f9:57:1e:13:99:01:36:9f:4c:8a:
                    d6:f6:f4:a5:36:28:9d:92:33:8d:bc:05:5a:4c:c7:
                    85:9d:3b:46:e5:d2:6f:50:74:3b:07:21:e4:b2:58:
                    de:53:1d:aa:2d:1e:bf:67:6b:fd:7b:1a:ca:d0:13:
                    61:a8:f1:90:3b:10:24:7e:69:c4:0f:03:d9:40:13:
                    89:8d:b2:19:8f:40:29:c7:95:88:b7:71:1a:4b:10:
                    b0:9e:dd:48:1c:36:25:47:57:1b:91:5c:86:e8:d0:
                    9b:1d:02:a6:29:d8:2a:bc:d0:1e:c3:fb:9f:d6:ce:
                    31:ea:8d:2f:ae:7b:ae:a4:63:dd:71:20:5a:b2:55:
                    9f:69:25:55:7b:f3:1a:67:3f:4d:49:be:91:20:c3:
                    64:c9:98:c2:87:ce:db:c1:bf:5b:fa:b9:39:56:8f:
                    a5:55:6e:ed:7d:43:0d:2d:d3:bc:31:fb:17:c8:2e:
                    44:c9:c2:b3:cf:7b:eb:15:be:9a:70:73:77:a3:11:
                    c9:de:21:b3:6d:91:fd:ac:ae:f5:93:13:90:36:68:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1F:60:91:8C:9B:EE:95:D3:B7:AF:55:2D:75:28:49:32:83:2C:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e564b91-bea1-399b-a487-9c1ab5a44781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:73:fa:15:30:65:c1:9c:e0:39:74:d4:2d:44:d1:3b:ca:c5:
         23:4b:b9:a3:49:dc:d3:b5:49:72:31:aa:ea:87:f7:9f:45:51:
         74:ed:31:35:a7:d4:c4:3c:69:20:9d:cf:e2:e0:d1:60:20:95:
         13:c9:9e:8f:94:1b:51:03:be:ca:92:7e:6e:cf:fa:9b:e6:89:
         0a:47:2e:83:9b:e7:69:10:6f:79:5f:96:51:24:ea:d2:b0:05:
         ed:74:66:c7:83:71:f7:8b:40:49:81:95:2d:f5:26:26:29:96:
         f2:17:87:38:bb:b4:b4:9e:95:74:7c:ed:67:e0:39:0c:81:60:
         81:d4:0a:33:19:e7:78:39:7c:aa:5b:c8:77:d8:03:9f:49:52:
         d7:77:3c:bd:e0:6e:f3:42:e3:a6:be:e6:b5:3e:b8:98:d2:da:
         33:a6:35:a0:1c:fb:46:39:50:c0:de:32:91:50:70:bb:ae:4e:
         02:a2:90:ff:63:fe:d3:a2:a0:3e:7e:d4:b4:a1:f8:ab:98:41:
         f2:3b:c8:b3:b4:03:91:b5:c0:0f:f4:db:16:31:00:98:c4:dc:
         8f:90:d6:76:b1:ad:3f:4b:2c:f2:fa:ec:0c:a2:91:b8:77:6d:
         3a:b2:b2:83:2e:c5:7d:b2:7c:c9:bf:5d:a4:5f:74:68:5e:95:
         45:86:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:08 2026 by rpki-client