Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
File:                     8e64b235-2f2a-3bdc-b562-b595318e343a.roa (raw, json)
Hash identifier:          nbEnY1nSwCpI/L/qz7f93QekWryOWS5UOYd6M1e8nNE=
Subject key identifier:   96:57:7E:55:65:2F:B4:43:10:06:71:B0:EF:13:A0:AC:AE:C3:16:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D7A0549D3C703398CB7A00D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     397203
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:49:d3:c7:03:39:8c:b7:a0:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=76c7c2be-1b67-4914-be12-8c1e28e439f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:b6:fa:8b:23:fb:84:ec:74:4b:3e:a0:b2:
                    ea:90:66:07:74:17:bd:59:2f:e5:86:14:c3:01:0d:
                    1a:b1:9e:80:f6:7b:65:61:08:55:0a:d2:37:93:1a:
                    7b:44:b6:24:bf:c3:5a:69:08:43:5a:d8:7a:66:5b:
                    7e:b7:6a:7a:67:0f:a4:dc:95:74:40:9e:c2:a1:cf:
                    cb:0d:6a:ec:d8:1f:fb:b9:91:dc:64:1c:4b:de:07:
                    c3:ba:94:af:20:83:1e:d0:0c:96:51:48:0a:cf:a8:
                    e0:0e:6a:29:c7:c2:31:43:8c:20:55:1f:e5:91:88:
                    a8:44:3b:6a:39:16:e5:b3:40:bc:e9:5a:52:7c:cf:
                    ef:21:39:22:e5:4e:23:49:54:96:74:65:58:96:93:
                    d0:62:da:d2:5e:81:48:61:53:f7:ad:89:98:ad:81:
                    4e:ff:7a:7e:e5:80:c6:69:ba:cb:67:e3:b8:26:3e:
                    0a:5c:76:cd:b4:a3:34:18:d4:f3:6f:6c:64:50:67:
                    f3:77:b0:7d:12:cf:42:21:8c:0a:06:23:0d:a0:43:
                    e9:da:e3:11:50:13:15:e3:02:ea:28:a4:fd:79:7d:
                    fb:5f:dc:2d:af:e8:22:55:c0:ff:2f:48:d2:0d:41:
                    a3:ae:30:be:3c:38:1b:ed:93:2b:22:32:80:b2:67:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:57:7E:55:65:2F:B4:43:10:06:71:B0:EF:13:A0:AC:AE:C3:16:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f4:ea:5e:71:ba:55:7d:e6:7c:fb:ad:81:1f:30:9e:28:87:
         b7:5d:89:ad:d1:2e:50:c9:a9:37:4b:38:c2:d1:26:0f:bc:00:
         38:f0:a8:10:5c:27:01:71:9a:38:dd:39:a9:44:b3:06:5b:c9:
         8b:b9:ce:55:38:f6:89:ca:37:db:0a:36:4a:c7:9f:5a:b2:95:
         b9:17:63:f4:27:a4:d2:e0:a4:4a:cd:cf:32:96:a7:ef:fa:63:
         93:52:d8:ea:ce:a2:a7:c0:fc:fb:20:9e:76:46:30:e6:37:a2:
         83:30:43:a8:72:a0:0f:85:8b:e4:9d:aa:c2:8d:75:0f:1e:08:
         3a:be:82:43:67:1f:80:b7:48:32:bb:a6:72:37:df:37:00:72:
         33:8f:03:4c:2c:93:b1:eb:be:da:69:d8:4e:83:c1:d4:30:38:
         6e:58:1b:6f:2a:ee:4f:d3:47:33:d5:72:74:79:eb:0d:3e:cf:
         44:3c:26:f8:99:5e:60:39:cd:62:33:1e:c6:ea:35:dc:21:18:
         c9:f7:24:22:d5:a0:4e:8e:f5:f3:85:81:62:cb:58:d3:0e:91:
         90:58:ac:bd:2e:f6:4e:9d:58:c1:5a:28:55:23:db:cd:20:4c:
         a3:fe:ef:29:ec:97:dc:43:29:05:76:fe:41:be:f0:52:6f:60:
         1f:32:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:59 2026 by rpki-client