Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ea3974-e6c2-3f30-bff2-69552c6e2b65.roa
File:                     a2ea3974-e6c2-3f30-bff2-69552c6e2b65.roa (raw, json)
Hash identifier:          QzSUvtd+lT/eqpvbeO7/a8asKaWBpvlYY+wqr7I6+Aw=
Subject key identifier:   8B:A1:56:79:D4:D5:9A:A1:33:78:B8:D0:79:F3:F0:0C:F5:F3:BE:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788744CCB59B33B251EFB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ea3974-e6c2-3f30-bff2-69552c6e2b65.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396555
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:74:4c:cb:59:b3:3b:25:1e:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f6fbc5ba-4155-4be9-92af-2a9a4b011f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:0b:54:5b:cc:8b:36:cc:5f:66:b6:47:5e:
                    ed:db:90:b0:5c:82:d8:9d:5d:1b:87:2b:cc:cf:c5:
                    76:f5:e1:98:c1:24:b7:50:f4:0f:b1:22:6e:d9:1b:
                    55:28:d5:4e:4d:8b:6a:70:ed:21:82:f7:9e:b1:c4:
                    cb:37:6c:72:1c:94:0e:4f:a4:fb:42:14:7c:83:27:
                    8c:c8:46:a1:d3:6e:d5:78:fb:2e:41:c5:cc:40:6b:
                    23:9c:11:b0:bf:8b:bb:8a:8a:d2:29:78:6d:4b:21:
                    5f:4e:e3:f5:e3:80:52:71:5c:a1:c0:40:39:ed:f8:
                    72:8c:4f:31:5e:ec:b0:ba:3b:28:09:e1:11:a7:5f:
                    d0:29:47:b3:56:63:92:7f:48:0e:1f:3f:db:0a:9e:
                    87:29:d8:6f:0f:28:b5:fc:da:19:ac:5f:60:36:97:
                    19:91:22:d9:72:eb:63:88:34:9f:2e:b7:78:f3:0c:
                    37:6b:15:d1:bc:cb:4e:2f:c1:62:0e:f6:00:cd:af:
                    bd:20:8c:c4:67:de:6a:ca:44:44:29:d8:8c:da:b5:
                    52:92:09:e9:ac:45:99:8d:10:fe:2a:fa:68:42:12:
                    37:86:ca:78:65:ce:50:5e:ab:1d:a3:96:56:fd:70:
                    da:13:5d:3e:c0:5e:2f:35:cf:7c:74:58:e3:37:7b:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A1:56:79:D4:D5:9A:A1:33:78:B8:D0:79:F3:F0:0C:F5:F3:BE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ea3974-e6c2-3f30-bff2-69552c6e2b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:b3:e0:eb:7a:10:8f:3e:46:b5:a4:24:25:66:75:a0:5c:
         aa:b1:8a:90:89:84:d1:61:d7:cb:26:93:9b:e5:2d:39:30:93:
         c8:bb:8b:b3:af:53:a3:c1:1d:a6:a5:d0:39:39:94:11:96:1e:
         b1:8b:4a:58:9f:4d:f2:a0:67:a2:13:88:54:b3:b4:3b:f2:10:
         7e:26:aa:4a:41:55:58:9b:88:86:51:74:7e:f6:aa:a4:fd:07:
         0e:c1:83:42:23:29:6a:13:00:17:8a:10:e9:4a:7c:06:dc:a9:
         4b:76:6a:7f:f3:93:2a:20:4f:aa:dc:2e:83:54:9d:5f:de:50:
         0c:eb:31:db:e2:cb:89:34:1c:be:84:fa:c7:61:ea:71:d1:5b:
         13:18:d2:17:31:33:4f:f2:64:9a:26:1e:7a:6b:dd:af:b4:48:
         59:82:50:06:dd:16:82:c1:71:e6:c4:a1:e3:0b:8e:10:d9:8b:
         ba:01:90:fa:01:8d:3a:20:6f:af:9c:67:f6:1b:d5:79:7c:11:
         0e:27:0b:d3:e6:87:a7:bc:fe:77:7a:68:e2:5a:48:2e:f1:77:
         a7:0b:7f:b1:1a:71:9e:b5:6e:00:6b:d6:62:bd:f4:c4:e6:da:
         dc:b7:b0:d8:74:7b:d5:09:94:ed:65:50:ee:18:b1:ea:82:8e:
         0f:8d:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:40 2026 by rpki-client