Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa
File:                     8f1333ed-7ccb-3a70-b466-78258419d210.roa (raw, json)
Hash identifier:          Isd/+moUIUMNroVNoPI8sg2pJzuN7uMjyUwAkJdIUQM=
Subject key identifier:   64:02:20:DC:6B:8D:B4:70:7F:7D:5D:8C:AE:74:3C:7C:DB:58:F5:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86956C5E3A24C86BE8D26780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     32651
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:6c:5e:3a:24:c8:6b:e8:d2:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=7a9bebc2-b1c7-4070-8752-51bfa63d1324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2f:86:df:19:82:c4:4c:db:bc:df:70:40:9b:
                    4b:40:16:97:cc:25:15:e2:e6:fd:1b:bd:b2:1d:ea:
                    7f:8a:f5:7e:06:3a:5b:5d:d0:79:2a:64:c8:fb:20:
                    5c:1d:9e:76:63:c8:6b:f2:f0:5e:fd:47:72:3f:7e:
                    b3:35:80:48:a3:e0:ce:1b:90:78:37:99:7a:61:0d:
                    51:85:56:23:07:a3:85:1b:ad:b1:5b:cf:fc:36:85:
                    41:87:76:10:da:e5:62:2b:2d:23:7e:cd:1a:91:a1:
                    3a:d6:34:ac:29:e6:58:0f:6f:80:11:f9:52:3e:c8:
                    84:8f:b7:b0:60:24:10:84:6e:67:ef:fa:c9:69:26:
                    05:f9:f9:fc:10:aa:d3:61:ea:69:17:76:46:15:e1:
                    8d:21:df:d1:d5:45:dd:78:69:2d:62:9a:b6:df:8e:
                    ad:6f:1c:d7:3b:a9:8e:ce:d3:d2:30:81:e1:78:20:
                    08:32:85:b8:a8:5d:34:20:9b:15:01:be:02:19:db:
                    d7:85:e4:f5:07:2a:af:ea:e3:82:fd:17:12:e5:91:
                    be:dd:9e:f9:52:77:52:4c:78:fb:1d:b5:fe:8b:5e:
                    cd:10:9b:fa:21:22:9a:85:47:ef:a1:a5:ef:84:04:
                    38:df:b7:06:8e:6b:91:c9:69:80:05:5d:6c:0f:83:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:02:20:DC:6B:8D:B4:70:7F:7D:5D:8C:AE:74:3C:7C:DB:58:F5:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:47:58:f1:5f:a2:f7:dd:12:17:26:da:4a:ce:f8:2e:93:04:
         7b:9b:73:58:a9:b7:94:c1:0a:ef:fb:46:a9:98:ae:d8:9d:1a:
         74:03:ae:23:46:9a:8c:19:d2:13:66:00:d1:3b:5b:35:50:50:
         a1:19:b8:bd:3c:8c:16:e2:f6:9a:22:ab:66:a9:77:c7:70:56:
         d4:57:11:03:55:5f:c3:d9:ba:8f:55:12:3f:bd:37:70:ae:37:
         06:4a:e7:36:8a:8d:11:92:48:4e:7e:8a:4a:a5:27:11:35:f1:
         ce:f8:b9:b4:71:1f:4a:95:86:d3:86:d4:94:b5:05:53:a6:57:
         3b:29:b0:ec:6f:ca:e6:08:a8:d9:2b:9c:c0:13:d1:21:95:5b:
         7c:5c:a4:74:11:03:36:c2:34:dc:0b:0b:8c:61:27:fb:0f:bf:
         99:38:b7:67:9f:54:a2:54:50:a2:f2:e8:e8:41:c9:18:3e:94:
         56:38:c9:cc:7d:6d:b6:c6:f3:88:42:6e:d1:ec:c9:8d:e3:68:
         bc:95:6d:87:66:bf:b1:98:bb:d2:82:c8:81:34:ce:dc:c5:f4:
         2a:46:b5:40:16:0b:2a:c6:be:a1:f4:8f:41:86:ba:13:8d:70:
         4b:b4:8e:7f:10:7b:9c:01:f1:ff:02:ad:c5:5b:5a:64:8b:99:
         7a:9c:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:20 2026 by rpki-client