Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73df52fb-9e9e-3730-a909-b73390c5ec81.roa
File:                     73df52fb-9e9e-3730-a909-b73390c5ec81.roa (raw, json)
Hash identifier:          Ov/g13vL+b+nfoQOVKjcGhXMNmlbBwT+eoFXAx6eCpE=
Subject key identifier:   08:A7:0A:5B:3F:0C:E4:EB:1B:B5:FA:B6:5E:AB:B7:14:52:B3:6E:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7878D1804D1EDFC6BE33440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73df52fb-9e9e-3730-a909-b73390c5ec81.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397201
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:8d:18:04:d1:ed:fc:6b:e3:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0fd60735-2582-4a8e-b644-10568d525cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:6b:f3:ae:4b:45:25:e0:90:5c:97:e7:ff:
                    3e:42:aa:7c:a1:27:79:a9:77:84:90:41:18:69:52:
                    f3:56:2d:4d:30:b7:c6:6a:c3:7e:6d:82:31:52:be:
                    c6:24:13:8e:cd:e3:08:0e:f2:de:db:ac:e9:45:3b:
                    41:a2:fe:b6:96:9a:ac:b8:7b:4c:04:3a:0c:32:83:
                    a1:c8:eb:47:81:9b:99:9e:5a:88:62:8d:8e:55:d3:
                    a2:bb:4c:fa:92:e5:95:09:94:06:43:e8:72:d2:56:
                    94:4c:02:2a:23:ed:81:fb:29:ac:00:c4:ab:bc:fa:
                    b3:32:af:49:d6:36:3e:4a:0b:9f:9d:8e:0d:87:49:
                    6b:97:0e:4b:71:71:cb:c7:2b:d5:5f:bf:d0:3e:1b:
                    23:c7:1d:2a:4e:4d:72:23:fd:c2:8e:7a:ec:c8:ec:
                    c2:d8:db:0d:e3:b9:c8:0b:4e:38:ed:72:31:94:2f:
                    19:80:06:67:14:7f:53:5a:bc:51:1e:2e:3d:73:44:
                    a5:26:13:98:8f:b6:9a:33:fd:3d:4d:20:ae:c8:5a:
                    33:1f:95:9c:ba:4c:50:92:17:da:7f:d2:b2:21:1e:
                    c8:26:70:0e:c0:83:ba:47:18:f3:73:8c:68:8c:f8:
                    7b:3f:90:3f:e7:13:ca:a4:d1:48:84:3c:ea:bc:c5:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:0A:5B:3F:0C:E4:EB:1B:B5:FA:B6:5E:AB:B7:14:52:B3:6E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73df52fb-9e9e-3730-a909-b73390c5ec81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:81:fd:73:c5:02:c2:4c:33:44:b3:a8:7d:cd:5f:86:dd:df:
         d6:12:16:af:6c:5a:63:6c:e8:3b:10:6a:21:28:6a:4b:ee:bb:
         ff:a3:5d:b0:79:8c:38:77:46:5b:9a:64:7d:6b:1b:92:89:f2:
         e9:aa:5e:53:f4:9c:97:ed:a4:9f:4f:c6:91:3f:4e:58:f5:4e:
         76:8d:e0:e8:5e:6d:68:d7:5a:e1:69:f8:a9:23:c0:0d:c5:6d:
         4d:0c:78:f7:35:82:a8:11:d6:5c:ad:56:f9:67:f1:1c:b8:32:
         f4:b7:d0:63:9d:74:ab:66:1f:6d:6f:3f:90:b5:b0:68:ed:51:
         a4:f0:a2:5f:07:56:09:76:99:53:a0:6c:9f:cb:8a:48:fc:3c:
         86:c2:fa:84:2b:e7:ba:04:6f:7b:25:80:02:d3:ab:54:21:4e:
         6f:1c:99:51:be:e5:10:e1:6c:1a:86:51:fc:a0:a0:f2:d9:e0:
         71:4b:46:07:90:90:10:d9:f6:9b:ff:3b:0c:a3:26:70:09:20:
         c9:1f:a6:2f:19:0a:2c:e9:9a:9d:99:4c:5e:4d:ac:66:69:6f:
         2f:e5:39:85:0a:73:0c:47:7a:05:fc:10:9a:ef:c5:81:a5:7d:
         b9:4b:d1:96:07:49:2f:ae:79:b3:8c:3d:aa:49:0d:6b:1e:3f:
         06:5a:ac:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:58:51 2026 by rpki-client