Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7737d700-01fc-36d5-986e-a534f35b7a57.roa
File:                     7737d700-01fc-36d5-986e-a534f35b7a57.roa (raw, json)
Hash identifier:          0EXLzlTx6ueN0b5HJr2+9yOBCXCm4hyoqnf7G2vvfCA=
Subject key identifier:   CC:36:AA:F9:68:5C:6E:45:E9:C1:D6:9F:9C:EF:BC:55:55:96:B7:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8695699786BD988F51C08100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7737d700-01fc-36d5-986e-a534f35b7a57.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396608
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:69:97:86:bd:98:8f:51:c0:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=1a84b168-d7e7-43dc-9d90-86ab8c61a153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:ee:3b:5c:5f:96:89:64:be:01:d4:d0:a1:
                    b9:15:f5:01:ec:fe:ef:89:05:13:19:79:79:02:e3:
                    f4:38:cd:f5:ab:5c:70:da:0a:6a:76:0c:1c:95:d4:
                    24:e2:bd:5d:0c:82:22:00:58:80:35:dc:fb:16:9a:
                    5c:a4:da:25:ba:3a:6f:d2:c2:22:92:95:a2:67:af:
                    82:f3:d9:ca:3b:96:84:72:40:73:bc:79:b5:82:6e:
                    61:44:2c:7a:65:e2:15:a3:df:d2:bb:2f:e6:43:26:
                    8f:b8:61:cf:63:ea:5e:3d:12:ce:67:b6:17:c0:c9:
                    f4:e4:b8:24:2f:ee:60:35:d3:63:27:ef:b2:af:ed:
                    1c:80:d9:ca:50:1b:48:d5:7d:f1:1e:a9:49:d6:ef:
                    aa:47:11:b6:7f:76:50:e2:74:f0:b7:cb:52:e3:13:
                    ee:57:b1:0f:49:42:df:b9:88:11:b0:9e:88:40:c1:
                    bc:b7:a8:e2:c6:56:31:ef:4a:83:f8:e9:b0:c7:39:
                    27:73:81:bd:bc:50:17:8a:36:5a:fb:63:96:d8:a7:
                    61:dd:fd:60:29:c1:07:60:fb:45:3f:2a:92:37:75:
                    7b:20:3e:b7:31:96:ab:63:c7:56:45:6d:9b:39:bf:
                    b8:28:8d:1c:6e:95:1a:3d:cf:ce:77:06:ff:63:40:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:36:AA:F9:68:5C:6E:45:E9:C1:D6:9F:9C:EF:BC:55:55:96:B7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7737d700-01fc-36d5-986e-a534f35b7a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f0:0d:d6:7b:9d:0a:68:ab:8f:61:c5:d1:a1:3a:fc:2b:82:
         91:4f:67:b3:13:1c:63:6f:ef:1a:e4:aa:af:bb:55:3f:55:af:
         34:5f:ff:52:01:90:a8:61:e3:bf:5d:f8:72:ed:fb:65:6e:b8:
         24:72:6c:73:f7:61:ce:23:44:5a:98:9c:81:31:51:9f:69:c8:
         ec:80:2b:4a:f9:3f:73:11:9a:eb:7d:6d:c8:fb:b3:07:26:31:
         a2:ef:48:cd:6b:12:4c:78:c2:a2:38:7f:a8:10:79:b3:c5:bc:
         8c:b7:35:53:af:dc:d7:29:83:1f:b5:35:e8:3a:85:bf:b3:a2:
         49:47:15:b2:c6:b3:5d:21:55:ff:43:25:a7:5e:8d:56:38:8d:
         3c:de:2a:3c:3f:95:61:74:40:12:6a:49:77:99:e9:07:e6:e3:
         58:e9:b6:54:61:7e:de:1d:a6:9e:2a:59:6d:d8:8e:37:66:42:
         7d:17:52:c6:6a:d4:13:fd:ab:7f:e3:4a:19:89:8d:37:43:f0:
         b8:a4:fe:ad:61:52:b4:25:cd:d6:5d:03:8a:76:16:d5:37:27:
         8c:d2:20:43:26:53:52:7a:02:94:e5:50:53:cc:e5:6a:ad:c1:
         41:7e:4b:94:9b:f1:44:d2:70:d4:08:9a:ad:31:c6:86:22:79:
         3e:32:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:35:50 2026 by rpki-client