Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62538f94-52b8-3914-8ab5-7743b5139f1d.roa
File:                     62538f94-52b8-3914-8ab5-7743b5139f1d.roa (raw, json)
Hash identifier:          L1B7kbaBGpEdJtNC6Qo2wckXlL/JdeQuQrD5PM5NAE0=
Subject key identifier:   95:A3:07:DB:91:A7:2B:6C:23:CB:B5:94:27:46:26:9C:C8:97:03:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7A0B13AA643E9A2127F97A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62538f94-52b8-3914-8ab5-7743b5139f1d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396552
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:b1:3a:a6:43:e9:a2:12:7f:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cf39b87e-de5f-4926-87fd-4dad1295b3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:74:5f:01:a1:6a:03:6b:8c:84:d0:ea:f3:47:
                    60:40:c1:c7:d4:65:5b:79:05:be:1b:4e:9b:85:5e:
                    49:0d:dd:29:6c:69:43:10:cf:13:d3:76:75:64:21:
                    58:de:d3:00:2f:ad:97:2d:1e:08:4e:5f:4a:47:45:
                    d5:c2:2b:2e:71:b5:d6:0d:65:44:41:8f:ed:b8:6c:
                    3e:07:51:22:a1:df:45:8c:e1:98:6b:f3:24:21:da:
                    dc:ab:78:4a:c4:30:54:9a:8a:ab:5f:b7:07:a9:fe:
                    b4:cf:50:c8:c1:1d:04:cf:25:2f:6f:17:97:5b:21:
                    70:37:75:30:ab:37:68:81:1f:19:fb:10:95:14:3c:
                    cd:0f:93:3a:21:70:83:b3:e3:32:68:ae:a7:9b:9b:
                    fb:aa:ab:ff:d0:b5:e9:b9:7f:1f:d4:d1:aa:2b:00:
                    5b:35:4f:04:7c:6e:c3:58:d4:55:db:c6:08:3b:db:
                    c7:61:d6:8e:cb:e9:23:8e:d4:2a:74:87:7e:4c:46:
                    9c:34:aa:e8:32:1d:1e:6a:3f:1b:9a:15:74:1a:8f:
                    9e:06:e7:c9:73:0a:1c:01:f8:39:67:89:b6:fc:6a:
                    9e:d1:41:87:a9:ff:d5:12:2a:55:5f:f3:6b:da:67:
                    38:ae:aa:92:9d:88:e4:ff:96:03:1c:a2:61:48:c5:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:07:DB:91:A7:2B:6C:23:CB:B5:94:27:46:26:9C:C8:97:03:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62538f94-52b8-3914-8ab5-7743b5139f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:45:45:b1:5e:f7:b4:fa:ed:4a:16:88:bf:86:56:20:55:c7:
         ac:5a:c4:82:84:06:a4:db:ac:d8:89:bb:92:ea:9c:b2:d5:6d:
         8a:97:f0:03:ef:c4:6c:37:3e:63:6a:3a:1c:6e:b7:b8:1e:87:
         eb:8a:08:29:19:cc:da:c8:48:1a:1a:71:a0:10:36:15:4f:9b:
         4a:c4:7c:ea:b7:96:62:5a:df:27:5e:23:96:89:ea:5a:12:4c:
         16:f7:9f:9f:60:88:f8:56:91:6d:2b:82:9e:6e:01:05:82:be:
         45:5e:ef:7a:4c:25:08:af:9a:22:bd:b8:db:86:fe:33:ec:c2:
         d0:f5:8a:e9:76:8a:65:83:96:f9:db:4b:de:d3:8f:8e:88:5d:
         54:be:47:69:7b:f6:6b:8b:68:94:d3:87:3f:91:04:c8:ef:04:
         28:97:f6:a1:8d:4f:b5:21:0f:ad:38:9d:96:e9:d0:95:3f:72:
         e0:12:8a:2f:7a:94:9b:5c:08:a2:24:c0:5f:cc:e6:4d:88:39:
         11:5e:03:0f:1b:88:59:d5:77:c0:f7:1e:4f:d8:55:2c:66:13:
         ba:27:65:d0:f3:3f:95:78:c1:92:10:33:e8:1e:fc:a5:91:32:
         ba:6e:7e:03:13:94:ad:83:91:38:5e:74:22:04:62:f5:b5:3a:
         22:0d:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:14:27 2026 by rpki-client