Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f0f592-4463-34dd-bf6a-262ffe682602.roa
File:                     32f0f592-4463-34dd-bf6a-262ffe682602.roa (raw, json)
Hash identifier:          evEF0KynvfG9Ybt3/DbXjOVamZtrM0h8qcs6BQui3WI=
Subject key identifier:   BE:7A:4A:AB:FC:52:D4:31:32:3F:ED:32:45:45:8A:C7:79:90:BF:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA790A52259F6EC252C214A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f0f592-4463-34dd-bf6a-262ffe682602.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396562
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:a5:22:59:f6:ec:25:2c:21:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7bb16f3d-1ce1-4803-9994-ce11ac9fec39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:b0:ef:f2:a3:6e:c7:aa:1a:fb:a7:61:75:
                    d0:20:43:fc:4f:41:fb:a6:9a:de:ab:83:59:fe:d8:
                    fb:62:ee:57:97:e0:a3:cb:53:48:1a:bc:24:be:4f:
                    73:59:8f:83:f5:3f:ca:ac:2b:99:8a:9c:63:b5:85:
                    a2:1c:ee:58:ce:37:e4:f8:b1:fc:32:de:28:68:c1:
                    60:e3:d8:c5:d2:e5:5e:b6:ca:f9:54:1a:14:3c:33:
                    4d:15:4f:c9:80:2f:21:83:1a:45:ed:2e:61:66:6e:
                    82:48:7f:f3:e1:9a:91:c0:34:c3:3f:c9:e5:4f:ad:
                    32:bc:d8:78:4a:75:2d:3a:26:a0:99:96:31:fa:f4:
                    78:81:60:62:34:89:13:60:8b:eb:21:de:16:a3:fc:
                    85:29:9e:31:aa:5a:bb:67:7d:f1:03:e8:bd:ae:85:
                    3e:bc:25:75:72:42:e0:30:3a:78:d6:19:0b:67:51:
                    73:da:36:58:09:3c:d7:5b:6e:1f:c5:20:03:cb:45:
                    6d:31:2f:bd:ab:41:0c:65:94:bb:55:27:66:92:8f:
                    60:72:79:73:cb:58:a6:bb:d8:01:2b:ad:40:05:bf:
                    6c:a7:3c:99:2e:22:ae:14:80:01:c7:8c:42:c6:90:
                    3d:a2:90:91:97:f7:54:89:69:84:29:30:08:d9:d1:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7A:4A:AB:FC:52:D4:31:32:3F:ED:32:45:45:8A:C7:79:90:BF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f0f592-4463-34dd-bf6a-262ffe682602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:e1:81:53:33:b8:bb:1c:5e:b1:ea:6c:c8:65:fb:5e:2c:
         d5:f0:35:de:7f:b7:0d:22:d2:92:f8:2d:53:33:37:b1:97:d7:
         47:74:e1:19:cf:6c:fc:ca:3f:f6:29:2c:b8:a1:17:13:d8:cd:
         d5:8c:d5:7c:a2:dd:76:eb:78:1e:36:df:00:2c:ba:ff:47:85:
         fd:bb:e3:e8:1c:12:9e:cf:bb:aa:cf:27:5c:8a:d2:ff:71:c3:
         c3:19:49:9d:30:15:f3:41:7f:8a:60:33:57:65:45:9b:a8:4d:
         3f:4e:ec:33:ff:49:ed:1a:83:97:50:e8:51:94:9d:1d:f0:5a:
         f9:86:3f:41:77:e5:b0:3f:cd:d6:93:11:e7:79:29:02:8a:10:
         5c:22:24:5f:dd:28:ff:b2:c7:36:d8:54:69:f1:da:50:ba:d3:
         82:52:d5:23:ae:7f:20:f6:52:5a:ce:ac:9e:e2:6c:b4:96:fd:
         5c:24:ec:86:d9:5c:8e:a3:8c:24:59:c0:64:03:e4:f8:e8:56:
         2b:37:ba:96:7b:89:78:1a:f1:70:5a:28:71:b6:f4:34:10:87:
         69:72:b9:86:31:d5:bf:31:1c:d8:66:bc:a2:0a:00:16:ff:17:
         84:1b:62:7b:0f:f6:8d:95:d0:7c:ec:ca:8d:fd:8d:ae:21:32:
         67:2b:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:43 2026 by rpki-client