Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8be3ae-7eba-3a24-ae3c-235f43f6670c.roa
File:                     5c8be3ae-7eba-3a24-ae3c-235f43f6670c.roa (raw, json)
Hash identifier:          lhu20OQ5VgxgA3E1K7ZLstJuVR2bD8wlyORsa0+4d8g=
Subject key identifier:   DC:F8:17:53:E0:AE:65:2A:61:FC:D6:D1:4B:51:40:C7:6B:EB:F3:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7A0D3E45978DD866D5ED980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8be3ae-7eba-3a24-ae3c-235f43f6670c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396567
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:d3:e4:59:78:dd:86:6d:5e:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c9d85041-66e2-4e27-a01a-c15acace1135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ea:5f:8a:ff:a4:38:18:01:09:52:e6:07:39:
                    0c:a1:f1:a6:d7:fd:5a:8d:e5:28:0f:ec:23:d5:3e:
                    50:7b:c7:29:46:e6:3f:87:4d:dc:53:18:3b:c5:f9:
                    77:42:3e:9a:e1:16:e1:dc:2f:f7:ee:81:31:6c:13:
                    50:d4:05:c8:a8:5c:95:b7:12:ea:5f:1f:e8:c8:e5:
                    9b:bf:09:c0:eb:73:69:44:ad:2d:73:d3:1d:17:27:
                    a6:2a:8a:1b:d7:21:ac:79:3f:e3:e8:1d:aa:e4:00:
                    63:33:23:43:51:c6:cb:cf:c0:7a:1c:0c:56:bb:8c:
                    73:d2:5e:bf:54:e9:7d:0e:be:fd:68:34:3f:04:d3:
                    85:9a:15:8a:c8:11:93:0c:01:fd:8b:3a:d5:ec:24:
                    5f:49:da:ea:0a:4a:b5:61:d9:bd:0f:fc:1d:21:42:
                    cd:a1:bf:ce:fe:4e:63:89:7e:e9:32:d3:74:1c:b7:
                    2d:24:1c:cf:c5:ec:d6:26:e4:a4:3a:17:f1:b5:63:
                    46:a1:be:78:67:4e:9c:c5:7b:23:8b:df:a5:8d:35:
                    02:82:b0:44:cd:7b:51:cd:a6:2d:c3:b6:3a:73:39:
                    91:98:cd:81:1f:4e:07:d5:41:51:67:61:7a:07:e6:
                    db:c6:6e:b2:05:a8:74:1d:5e:f0:b6:e4:e2:f3:74:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F8:17:53:E0:AE:65:2A:61:FC:D6:D1:4B:51:40:C7:6B:EB:F3:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8be3ae-7eba-3a24-ae3c-235f43f6670c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:4a:10:7f:12:82:ac:62:d2:81:b5:db:c7:96:7b:c4:61:e1:
         1a:39:af:46:f5:3c:5e:08:0b:6c:5c:cb:86:ef:2c:73:91:e3:
         ac:29:e9:cd:d6:22:bd:33:41:de:27:63:7b:af:56:ce:a7:a6:
         58:47:d0:ba:6d:8c:28:9a:89:f9:d2:1d:90:39:2b:c3:2e:9b:
         d5:b8:9a:9c:8c:db:f7:3d:59:b4:45:f4:08:72:bf:b4:0b:76:
         c6:b9:99:f8:04:8c:a1:22:59:55:d1:b9:f1:f6:e4:1f:1a:9b:
         82:1a:36:ad:0f:38:7f:0d:cd:85:7a:d9:2a:1c:4a:ee:dc:10:
         66:63:7d:66:c5:c1:dc:47:53:eb:ef:49:77:96:e4:2d:c9:92:
         cd:c8:29:c3:e6:76:7f:ce:ac:3d:ce:ea:fb:2c:5d:fa:4c:d8:
         a1:bf:a4:f4:74:9e:20:d7:2e:da:72:9e:85:4b:5a:8a:1c:30:
         ab:2b:08:76:eb:db:45:1c:f2:ac:4b:b4:02:3a:65:de:dd:27:
         f9:ef:7b:71:b6:c1:e8:79:d3:1b:62:1f:cf:5a:bf:67:bd:6d:
         c2:17:36:f5:e7:f9:7c:af:f4:de:41:65:46:59:ff:03:9b:69:
         06:bf:d3:ce:98:02:5e:47:cd:bc:53:07:ae:ee:5a:59:e1:62:
         39:4d:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:36 2026 by rpki-client