Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/336ee94a-0c9e-37e0-aefe-99b364b090b0.roa
File:                     336ee94a-0c9e-37e0-aefe-99b364b090b0.roa (raw, json)
Hash identifier:          CMFmBmdVnRmMnfjpXGUCAxxo4yjQxrhmawaiCN2Apnk=
Subject key identifier:   85:DB:BB:54:82:2E:D1:05:5D:C9:B4:23:29:C8:6E:B5:45:99:55:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7883ABF02F1941940FBC7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/336ee94a-0c9e-37e0-aefe-99b364b090b0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36627
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:3a:bf:02:f1:94:19:40:fb:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=41ade25d-b8ec-43ee-a353-36cada42d0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:4b:23:e1:92:73:d1:41:a5:3a:00:ca:2b:
                    b1:c1:b9:86:e3:c6:2a:15:7c:58:f9:96:b8:42:1d:
                    59:f1:bd:51:e3:05:af:77:f4:84:70:cf:d0:88:5b:
                    fe:c7:2d:69:0c:ad:57:4a:9a:bc:bc:45:a4:bd:a2:
                    86:15:7f:3a:23:86:3a:df:cf:e9:7d:87:74:12:d8:
                    44:73:81:4c:c3:79:f1:7f:19:90:28:4d:d9:d8:e9:
                    1f:81:5e:d3:76:93:ba:d6:62:06:fe:b7:72:78:bc:
                    e3:80:d2:88:80:b1:01:74:79:37:33:1d:3d:f4:9b:
                    48:5f:74:dd:a7:41:a3:4f:59:ce:08:3a:06:01:2d:
                    e5:78:1d:e9:f9:89:c8:b6:5c:e5:09:4d:ab:34:c0:
                    24:20:bd:7f:3e:21:29:69:66:d2:9c:ed:88:66:f6:
                    84:40:fb:a7:c2:8a:15:fe:56:dd:26:24:53:3e:28:
                    9f:c3:56:48:28:bd:67:d7:5e:f6:0a:f6:3f:a4:1b:
                    c8:a2:8c:77:86:ec:93:e3:60:0f:f7:37:4f:3f:0e:
                    34:b0:bc:e8:f0:1f:9a:5a:8c:d0:ba:d2:6c:db:45:
                    19:bd:08:8b:70:6a:c9:fe:64:11:75:d1:23:c3:81:
                    28:9b:a1:af:1d:1b:c0:4b:6e:fe:81:0f:42:ed:72:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:BB:54:82:2E:D1:05:5D:C9:B4:23:29:C8:6E:B5:45:99:55:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/336ee94a-0c9e-37e0-aefe-99b364b090b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fe:37:52:76:fd:21:ac:c7:4a:e4:a8:1a:d2:7b:2e:62:cb:
         be:bf:67:86:94:32:d1:3b:31:0d:7a:10:84:76:0e:14:1e:46:
         b6:7f:8f:17:ee:92:ed:62:21:ca:54:80:eb:85:d9:cf:3d:a4:
         c0:45:68:03:3f:d2:ab:11:d8:c4:ce:8e:bc:de:55:e5:12:71:
         9e:f1:ed:cb:5e:72:25:49:d2:dc:8c:cf:a5:86:bb:a5:99:2e:
         01:cf:84:75:44:03:61:73:7c:e1:dd:a9:41:f3:6e:ea:1e:67:
         94:24:a3:0f:f9:6b:b3:f1:12:ae:87:58:9d:27:78:7d:0c:0d:
         f2:42:04:5c:b9:3f:1c:78:c6:48:c9:8e:f9:46:cc:ae:64:69:
         c5:88:e1:31:3e:da:bc:df:39:bc:a4:e3:df:76:0d:62:a3:ce:
         90:08:33:f8:ff:23:07:0b:c9:13:c3:e0:4f:35:b7:60:89:ed:
         a8:20:94:ec:9c:09:64:32:28:45:1d:e9:85:8c:65:52:de:c3:
         93:22:b3:4a:e5:cf:77:81:3c:e8:2f:25:b8:12:f2:11:5f:43:
         8f:e8:b3:3c:bf:0c:49:7d:e4:3a:7e:5f:af:17:42:e1:e0:31:
         09:89:7c:ca:81:ec:b5:b7:78:0d:89:1c:b7:57:a5:8e:04:e0:
         2f:08:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:26:59 2026 by rpki-client