Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c733fd5-0677-3a02-b6df-28a5ae913bf3.roa
File:                     8c733fd5-0677-3a02-b6df-28a5ae913bf3.roa (raw, json)
Hash identifier:          /8inAYeAcRvqOIg4Naet7xZMDd5qjIkJlidZvr4H7oA=
Subject key identifier:   97:D1:50:40:02:BC:FE:4A:9D:0C:40:1F:79:FC:C9:A9:FF:48:9E:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAD884FF91ACE1D05B4500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c733fd5-0677-3a02-b6df-28a5ae913bf3.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396563
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d8:84:ff:91:ac:e1:d0:5b:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=b7bd9bca-d058-4a71-848c-23c0988fa8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:5b:9e:3c:f9:83:d6:c4:3b:2e:0a:6b:88:
                    01:8f:09:e8:73:8a:a2:36:60:7c:cf:6d:c5:8a:84:
                    ec:47:eb:fb:5e:8f:6d:cb:7f:73:eb:ca:e5:0a:3d:
                    08:91:11:7b:9f:2d:f4:d6:6b:f4:99:e7:d3:60:4f:
                    05:39:38:0a:ce:10:da:76:7d:bf:d1:2d:9b:b1:0d:
                    72:58:49:ae:e8:60:7e:30:dd:80:50:e7:25:00:f3:
                    f6:30:9d:bd:0d:f5:1d:db:ec:54:27:2d:06:d8:cd:
                    b3:28:42:ff:e9:0f:7c:70:cf:41:fa:5a:5c:c0:44:
                    11:df:85:84:b5:74:9f:8d:3c:e9:63:a4:b6:5e:85:
                    fa:04:9c:15:16:fc:57:c0:8a:5b:61:8c:bf:51:7b:
                    71:bb:b5:d0:05:22:34:04:ce:27:43:c5:29:68:92:
                    c0:22:07:eb:3a:36:1b:17:c7:12:24:27:98:fd:8b:
                    db:c8:65:d2:98:7e:59:4a:d7:5a:1b:1a:60:bc:28:
                    04:2f:cd:7c:84:f6:bb:47:8d:c9:50:12:25:44:18:
                    aa:df:a5:3c:40:5f:91:d6:cd:30:88:e7:26:b9:ba:
                    ee:59:79:4d:01:4f:4f:05:26:49:7c:cd:04:cb:ac:
                    e1:0a:ed:6a:b2:8a:c0:19:3b:1c:14:2c:91:56:ea:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D1:50:40:02:BC:FE:4A:9D:0C:40:1F:79:FC:C9:A9:FF:48:9E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c733fd5-0677-3a02-b6df-28a5ae913bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:41:23:df:33:66:d4:9d:2c:4c:b5:22:1d:08:de:83:43:
         a4:28:1f:f4:05:52:df:6c:7c:3a:68:74:3f:2a:ee:3f:05:86:
         12:b8:f7:52:09:f9:86:65:ae:e4:5f:76:cd:aa:7f:84:be:bd:
         05:ee:13:82:da:df:67:1b:87:38:47:1a:2b:b5:57:92:bc:52:
         c8:51:44:40:57:f6:fb:bc:8b:6c:ce:48:3c:59:9d:4b:62:92:
         e0:31:55:37:e3:35:40:b0:f8:fb:73:5c:66:05:35:ae:9f:25:
         f2:2f:41:0d:3d:04:1f:85:4f:00:3c:6a:6d:99:43:f3:26:dd:
         7f:5e:48:9c:31:29:33:9b:2f:99:3b:ce:d0:fc:6a:a1:5b:fa:
         3b:02:06:9c:da:7b:aa:b3:61:6c:33:48:da:a2:ae:69:90:af:
         a9:ee:21:81:88:a2:5f:8b:02:00:73:7d:50:a3:8e:e6:9d:90:
         a3:d8:b1:aa:37:23:d4:fb:21:35:f2:39:4e:a9:c0:e3:c7:fa:
         58:f3:71:be:90:83:81:19:fe:e2:83:a6:fb:93:02:83:65:4c:
         6c:5d:7d:17:28:b5:6f:27:47:ce:6b:bc:d0:76:2d:6b:50:7d:
         3c:bb:80:ea:2a:20:a7:77:26:18:21:05:a5:ac:44:ba:3c:59:
         a4:94:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:32 2026 by rpki-client