Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/710c8302-f257-3d9f-a498-ea89ca4dd939.roa
File:                     710c8302-f257-3d9f-a498-ea89ca4dd939.roa (raw, json)
Hash identifier:          nqOeNLiVRjVhKpmly146bINd9hfqrjrfl59vq3CnkGw=
Subject key identifier:   30:4A:EE:F1:4D:93:79:5B:50:A2:C9:DD:77:B4:64:44:CD:6C:73:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7878F60EB2F9589EE0DDDC8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/710c8302-f257-3d9f-a498-ea89ca4dd939.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397208
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:8f:60:eb:2f:95:89:ee:0d:dd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b38d35aa-1fed-4127-9a35-3142cd645d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:a8:02:ed:35:f6:9d:8e:0a:dc:ab:19:f5:
                    ac:83:b0:14:02:f3:97:3d:9d:93:37:5e:77:fc:2a:
                    ba:ee:ba:38:7d:0a:cf:47:8f:6a:d2:e8:d0:df:4b:
                    62:6e:9a:23:7b:4b:23:e7:3e:7b:9f:a4:40:4b:0d:
                    8f:84:df:ab:5e:30:99:3e:b4:20:98:09:9f:23:9e:
                    ed:b7:26:cb:06:00:e8:0c:3e:84:cc:97:db:2f:65:
                    6e:4e:a2:ed:8a:9f:aa:4a:0b:e9:06:21:42:ba:73:
                    9f:59:c3:2d:d5:a3:08:46:cb:3c:4b:2b:c0:b5:46:
                    6c:bf:87:2e:8b:d2:ae:d2:15:67:9d:58:e8:8d:3d:
                    d0:ae:62:60:53:84:b1:31:bc:2b:b3:62:a8:d0:60:
                    88:27:b9:c7:be:77:92:53:3d:a6:fa:35:e1:3a:b5:
                    ac:c9:cf:f3:1b:33:2b:9a:60:d6:b3:e9:76:aa:44:
                    5c:a3:3d:d5:7d:ff:dd:af:b1:01:ca:02:3a:d6:6e:
                    62:fa:ae:e7:0d:5f:3a:90:08:87:9e:9b:9a:b1:52:
                    cb:eb:d4:87:8e:95:fd:65:6c:39:74:bf:f1:52:d9:
                    c7:22:e0:d0:f3:16:ac:18:87:82:49:dd:68:77:69:
                    49:10:d3:f0:8d:ba:44:02:80:61:98:ff:af:08:94:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4A:EE:F1:4D:93:79:5B:50:A2:C9:DD:77:B4:64:44:CD:6C:73:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/710c8302-f257-3d9f-a498-ea89ca4dd939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4c:e7:e7:93:f9:f8:dd:00:27:8f:68:de:cb:c1:85:57:aa:
         6c:ce:07:0e:e2:84:e2:44:00:5c:60:83:6f:48:76:3f:89:d0:
         85:3f:1e:90:0a:46:c4:2c:c8:05:6b:7d:4a:a5:98:ba:55:5f:
         f8:ed:a1:bb:b1:e3:b0:28:2b:14:cb:1c:b6:66:e1:c7:81:0b:
         b3:03:d7:d8:04:21:1c:e1:ab:cc:c5:37:e3:5a:bc:d7:c4:ea:
         68:8e:f2:c8:25:ce:7a:05:e3:68:24:30:60:54:0a:5b:52:2a:
         2f:b3:60:6f:ea:44:37:e7:ba:0e:fe:75:eb:c6:d5:f4:86:35:
         f1:c8:f0:c8:57:f7:fe:83:fa:3f:5f:ea:34:a4:66:67:e2:eb:
         f8:92:61:94:80:37:83:26:eb:4c:39:35:99:e8:b1:6e:48:cd:
         5d:c0:dd:66:77:30:40:71:01:c3:89:16:e4:6d:be:19:25:e9:
         b7:6a:f8:fc:11:91:4c:97:b8:2b:ea:fd:f5:55:f2:63:e5:53:
         06:10:81:c8:15:2b:f1:16:d9:25:4a:a6:82:d6:8b:e9:07:3c:
         f8:a1:ba:5d:b0:df:2d:2c:2e:d9:03:d1:97:ab:77:b4:c8:7c:
         28:eb:a9:29:80:6a:61:29:07:60:fc:e7:c3:2e:34:96:55:8c:
         89:dd:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:32:18 2026 by rpki-client