Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0220299-28be-3176-a3a5-4d55b01fc306.roa
File:                     a0220299-28be-3176-a3a5-4d55b01fc306.roa (raw, json)
Hash identifier:          /ZFNYpJPCapC8UUjOmo6LH8CUqbBTclGj+/b9cepQ14=
Subject key identifier:   7E:53:EE:F1:AE:3D:66:6A:46:F2:68:6E:87:97:7E:41:D1:C0:38:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79095B3838280B2DBA20240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0220299-28be-3176-a3a5-4d55b01fc306.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36617
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:95:b3:83:82:80:b2:db:a2:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ffe7bd9a-419d-4455-8613-a6a384510586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:7e:4f:42:5a:d5:fe:52:10:d9:27:12:9a:
                    23:3c:a2:f2:2a:05:29:de:e7:b8:da:b9:e7:c2:ae:
                    84:de:36:e2:61:f0:df:76:7a:de:04:52:5b:56:cb:
                    71:c9:a7:2c:29:b0:a1:8f:bb:df:e3:29:7e:07:ed:
                    20:86:c7:24:8b:9c:c9:b7:af:d3:f3:a2:e3:57:ea:
                    f5:1c:ab:79:3b:19:ad:b7:f8:a6:6c:c4:e9:67:7c:
                    7c:0d:2b:94:3b:c6:3f:15:a1:a1:c8:ad:88:55:15:
                    45:cf:05:2d:a1:11:05:c5:bf:d9:6a:b5:47:de:4a:
                    a0:7c:a9:d2:9c:56:9c:09:e0:81:df:f2:11:eb:b4:
                    02:39:94:bd:cd:8b:87:38:24:82:65:7d:fd:f3:90:
                    94:33:9f:15:5c:08:e0:e6:fb:f3:5d:70:df:e1:17:
                    4c:d4:3d:89:f2:66:58:76:d9:00:f8:cc:c4:f4:1e:
                    db:26:d6:2f:3e:c1:f2:a5:5e:61:3f:7c:6a:05:23:
                    9b:85:56:67:0e:4a:9b:4a:35:80:9b:7b:32:6f:03:
                    39:fb:c4:b6:df:37:ff:d7:bd:d6:f8:45:0e:9a:cb:
                    65:39:46:b5:f8:ef:ce:1f:3f:73:cd:26:6f:8d:6f:
                    67:3a:22:88:59:90:e9:80:ac:d9:af:0b:68:ef:c6:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:EE:F1:AE:3D:66:6A:46:F2:68:6E:87:97:7E:41:D1:C0:38:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0220299-28be-3176-a3a5-4d55b01fc306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:2f:72:a2:ad:1c:fe:be:dd:ad:96:2f:13:16:bd:d5:bf:9b:
         f5:5f:db:80:59:a7:ba:cd:bb:51:a9:00:0a:e8:84:5d:56:b0:
         d7:5a:5c:d3:ac:77:9c:d9:c7:d2:73:63:93:86:f8:a6:a1:a5:
         5b:ae:25:0a:0e:18:4e:7b:a6:d8:ad:74:99:93:56:16:e7:20:
         2f:76:94:64:fe:a7:60:16:6f:2b:9d:cd:b4:64:90:a5:bd:e2:
         44:01:03:b7:2c:0f:87:c8:93:5c:5a:36:24:40:8d:45:af:a1:
         8e:25:8f:a5:6b:a2:fa:8c:ec:35:21:3b:a6:0d:ad:4f:cb:a8:
         8f:c7:17:65:53:d5:4f:52:d4:fc:79:8d:4c:91:75:44:d7:13:
         af:ec:3e:9b:68:e8:fc:3f:60:d3:48:d7:fe:fd:d2:9d:59:96:
         30:b7:86:c4:e2:bd:17:d0:d5:4b:5f:ea:15:c8:d1:c3:35:9e:
         09:c4:bd:0a:9f:a0:3c:33:a5:d9:60:34:85:a3:f5:73:49:95:
         9a:f8:c6:46:fb:4c:56:1d:e1:72:ec:80:5a:ed:3e:9f:97:cd:
         c0:6c:78:66:8b:e2:57:ac:30:20:3e:74:a1:d7:6d:20:c5:8e:
         15:fb:bb:99:76:c1:a7:cb:04:a7:a7:79:16:32:ea:f7:99:e1:
         06:15:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:16 2026 by rpki-client