Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af006414-146d-3168-ada3-80b1763f02fa.roa
File:                     af006414-146d-3168-ada3-80b1763f02fa.roa (raw, json)
Hash identifier:          8KdwUS5ALuk9LJS/W//y5zmfIi1Nl131balC7yQpVZI=
Subject key identifier:   B4:5B:24:47:23:4C:0D:F2:C6:B4:F4:CD:96:A8:E1:96:A4:B9:9B:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788B1F9728E4A7868C69912
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af006414-146d-3168-ada3-80b1763f02fa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396547
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b1:f9:72:8e:4a:78:68:c6:99:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c20b7b9a-ab1c-455c-ba4e-480770da2da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:0f:57:5a:d2:e1:de:10:4b:76:c8:a2:f9:
                    bd:6a:41:6f:10:c7:c9:92:89:d1:aa:29:29:e2:da:
                    64:3c:50:0b:37:d1:22:c6:43:fb:cd:eb:53:48:f7:
                    39:82:2a:64:6c:39:a5:98:26:3c:1b:ab:ea:66:14:
                    9e:63:d3:b1:93:b0:a4:37:2f:30:48:0f:6a:48:c1:
                    32:bf:9c:c7:05:17:c1:a1:19:79:a9:f2:66:94:1b:
                    b5:43:54:3e:89:6e:08:e8:0b:aa:ff:c0:a3:bb:c5:
                    a7:1b:a3:17:03:b3:9d:31:66:b1:bc:25:1a:6c:4c:
                    e5:98:20:f1:9a:48:98:32:d7:5e:b3:2e:88:28:c6:
                    9c:07:e4:94:a7:23:db:44:12:b5:5a:f2:d0:19:ca:
                    37:13:ef:7c:b7:9f:ae:c7:bf:f5:0e:3c:6a:90:98:
                    c6:6f:53:46:4e:a1:3d:85:b3:de:e1:79:9d:77:e8:
                    31:9e:3a:13:67:86:1b:b2:3e:a0:ac:ad:71:d8:45:
                    b7:41:89:60:cf:70:85:e2:2e:cb:61:7c:18:ce:27:
                    50:66:8d:a1:96:87:8c:d1:3e:7c:61:96:44:e9:7a:
                    17:4d:77:5e:ae:b0:65:42:6c:4c:f2:ed:38:40:55:
                    de:89:87:ba:50:56:79:16:b3:8a:95:f6:51:b9:7b:
                    5c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5B:24:47:23:4C:0D:F2:C6:B4:F4:CD:96:A8:E1:96:A4:B9:9B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af006414-146d-3168-ada3-80b1763f02fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4d:8a:de:f0:ef:c7:af:7e:0e:f6:f3:58:bd:a7:b7:08:25:
         2a:ad:64:a7:cc:6d:de:4d:ce:6b:5e:d5:26:03:95:d5:d4:2b:
         7c:23:b7:03:84:7b:40:76:5e:15:5d:30:eb:09:a6:15:16:63:
         52:9e:44:e7:89:6d:f6:5e:08:ff:27:17:1a:7c:1c:8e:55:bf:
         f3:b2:50:1b:1e:f0:89:af:a8:0a:cb:bb:7c:94:78:2c:8d:d0:
         f5:3c:b1:0c:03:09:9a:b5:ee:e3:e2:ad:2e:8e:cd:83:5a:6c:
         21:0f:06:d0:04:c6:76:3c:e3:0b:b2:e7:31:08:e0:e4:66:29:
         98:a2:b4:b3:5a:43:0c:12:29:c5:49:58:b6:76:ab:be:29:5b:
         fd:93:c7:54:8a:be:51:37:1a:1b:71:01:f5:73:8a:cb:e0:02:
         d9:e5:19:86:a5:88:de:43:be:9e:15:cf:18:b3:65:20:88:ca:
         fa:39:62:9b:22:3b:fa:14:42:cf:25:1c:55:9b:c8:da:4b:7f:
         f6:1d:aa:fc:15:3b:c8:dd:b7:f8:e0:51:6a:40:ac:f1:28:c6:
         0d:41:45:80:23:a5:1e:65:21:4e:66:94:9f:4f:ea:bf:a4:cd:
         07:ad:42:d6:89:4e:9a:51:bf:7d:9c:4d:f3:c4:37:fb:62:e0:
         c1:ca:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:24 2026 by rpki-client