Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
File:                     97689e81-de50-349b-9e06-604ef847971c.roa (raw, json)
Hash identifier:          TGSQ6HzpWvPmK09cU/gMYhH/iLsvbGJWQDLw1Rh8MU8=
Subject key identifier:   E0:7C:32:3A:E2:C0:30:C5:6F:32:CE:F4:6C:B8:BA:2C:C0:F7:90:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78EEF585E8D45391D8698A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40647
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8e:ef:58:5e:8d:45:39:1d:86:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ca620491-a305-4133-b57f-32a1948e302d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:a5:2a:41:6a:c5:e0:db:cb:9c:4c:ed:df:
                    89:57:7f:d5:5f:7b:43:5a:be:fa:c4:86:b1:81:90:
                    69:0b:e4:8c:61:e9:78:9e:76:d1:76:e2:d6:ea:9d:
                    a3:d6:9a:90:e1:e2:82:07:c7:75:56:09:f6:ff:62:
                    91:04:67:76:b8:e1:1d:87:ab:33:59:c0:d0:4e:90:
                    00:be:52:3e:e8:7c:33:07:d6:d9:ca:ea:b8:71:74:
                    a4:22:9a:16:8d:dd:66:80:bc:a6:f9:31:81:e6:c5:
                    42:be:dd:7f:c3:64:48:50:23:b4:55:ef:78:f9:31:
                    f1:d9:e9:63:24:07:b4:11:f4:fb:38:27:0c:29:23:
                    e0:d3:5b:8c:8c:5e:1d:63:ef:1c:01:a9:71:e7:5e:
                    71:91:17:57:c1:d3:e3:b0:82:f2:7d:32:33:3a:55:
                    1c:cd:96:b8:36:a1:d5:10:27:4d:24:23:d1:eb:be:
                    93:11:63:62:51:91:0f:28:a5:5c:50:10:43:d8:4d:
                    34:fe:60:76:f7:7a:64:e1:3b:fc:3a:87:ab:00:6c:
                    fb:a0:b4:60:39:73:f0:95:8e:3f:22:0c:19:56:34:
                    a8:d2:ab:e7:cd:26:5c:6e:d3:12:ce:35:d9:fd:58:
                    f4:14:22:82:9f:99:64:94:18:4f:44:1c:de:4a:9c:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:32:3A:E2:C0:30:C5:6F:32:CE:F4:6C:B8:BA:2C:C0:F7:90:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97689e81-de50-349b-9e06-604ef847971c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:17:3a:72:0c:3d:79:2e:b4:46:71:4b:fb:84:07:20:f8:a9:
         bb:c7:68:c0:9d:eb:a7:5d:b0:a7:cc:2a:15:16:a2:38:6f:13:
         f0:43:df:c3:75:b5:36:4f:7c:e5:18:13:5d:78:0e:69:88:66:
         0f:27:fa:b5:a4:66:21:71:b8:42:50:1c:43:bd:2f:01:7c:6e:
         b0:21:48:94:f9:f4:df:0e:21:5e:f9:fa:d9:bc:52:a0:04:03:
         b9:de:7e:13:0c:90:4c:8a:cc:f4:8d:9f:e6:29:dc:5a:06:9d:
         c9:58:0e:af:18:41:29:b2:33:72:a3:0f:90:d5:57:a1:f3:d4:
         af:cb:ca:2d:21:52:0a:0c:6a:eb:7b:f4:4c:b3:4d:84:08:f2:
         6c:fd:bc:38:b2:3b:ec:d4:ec:b7:66:9a:d4:ef:a8:65:e1:f2:
         dc:8f:62:dc:07:7d:f5:a8:10:5f:27:dc:11:27:3c:dc:67:a9:
         3b:36:e1:0b:96:b1:00:7a:da:21:73:57:d3:e1:df:56:5c:37:
         05:cd:15:c4:43:c3:63:ea:be:1d:ad:b3:ec:e8:7e:db:13:e4:
         4f:bb:1f:bb:32:d2:e7:81:d3:a3:e7:b4:6c:eb:0e:86:47:2f:
         d1:df:da:46:54:fa:b6:b5:c3:ff:73:01:18:62:56:28:d8:bb:
         b8:ce:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:02:36 2026 by rpki-client