Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c39a3ee9-7046-3bbb-8f53-da9645a93286.roa
File:                     c39a3ee9-7046-3bbb-8f53-da9645a93286.roa (raw, json)
Hash identifier:          IWfHAojUA7KXYQsELXqP9DBYTM8DA0VRbkuWkZFyp78=
Subject key identifier:   D1:02:E7:FE:18:9A:4C:7C:24:68:6F:96:E3:66:4F:90:59:03:87:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7879031229C805F30CCBF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c39a3ee9-7046-3bbb-8f53-da9645a93286.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396615
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:90:31:22:9c:80:5f:30:cc:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7d90ce7e-e893-4388-9678-158ab6438c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:93:af:b0:24:5e:fd:f3:b5:77:6f:df:21:
                    59:8e:68:85:af:42:b7:7f:5e:d7:c4:98:58:3e:b2:
                    5c:3b:82:3d:66:82:d4:06:30:46:ec:f4:da:29:a5:
                    a7:10:55:73:d8:ad:cf:1c:65:22:15:2f:33:7d:a3:
                    36:af:c0:6f:ef:77:de:94:7d:1d:cc:03:95:02:3c:
                    b8:ff:2e:4a:fe:8c:21:0b:93:f3:82:dc:12:93:37:
                    20:a5:ab:9e:04:25:cc:06:94:fc:56:59:65:82:78:
                    bb:9b:1a:fc:7d:83:ef:8f:3b:e2:35:a8:0f:e6:3e:
                    5e:ea:84:ba:3d:f9:0b:06:a7:df:54:b1:10:97:9f:
                    4f:ed:ec:a7:bf:f2:f2:15:41:cf:e2:13:a2:d6:1a:
                    c2:2b:8f:4a:c5:cb:f2:e1:e3:10:af:10:3f:bc:c5:
                    c2:60:14:d8:bd:39:c6:43:6d:e7:f7:bc:b6:f7:55:
                    57:e2:85:e0:5d:40:78:1c:8c:99:7f:85:17:86:2a:
                    b0:88:b6:b3:15:4b:a0:2b:f7:64:2d:f0:00:f5:b7:
                    35:66:db:53:2c:6d:c7:7a:a9:dd:a9:7b:56:0c:cc:
                    f3:c8:01:28:45:ea:70:73:0c:4a:ac:6c:f7:4b:f0:
                    66:fa:3f:1f:93:da:4a:13:17:f4:1d:32:02:ee:8a:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:E7:FE:18:9A:4C:7C:24:68:6F:96:E3:66:4F:90:59:03:87:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c39a3ee9-7046-3bbb-8f53-da9645a93286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:83:10:1f:62:59:f7:d9:87:49:5c:c8:1f:97:39:f2:eb:fa:
         a3:d3:a2:82:39:59:24:4c:f9:b9:98:6a:b6:4a:7a:1e:61:1a:
         c0:d9:1e:c8:ea:21:db:71:c3:09:5a:a0:bc:c9:0d:85:ad:56:
         cc:ba:85:eb:c6:f6:65:b5:81:19:7f:91:57:af:5f:d8:ee:74:
         16:2b:ba:75:59:4d:33:9f:05:03:81:fa:7c:46:d7:f7:24:64:
         2c:c1:d2:71:29:db:33:ba:72:e6:8b:56:6f:34:b4:3c:a7:4c:
         95:47:13:c9:d5:47:96:ea:20:55:b1:f5:28:64:58:81:f9:8b:
         6a:48:3f:83:50:f7:66:54:15:64:8b:5d:c6:50:a7:cb:da:6d:
         a7:b0:6f:0d:98:9e:03:b8:57:8f:26:50:34:29:b4:ef:d3:45:
         c4:d2:2e:a6:9c:2b:15:83:22:16:db:17:97:6a:f9:ca:0f:24:
         62:4e:45:8f:c7:72:b3:f1:79:25:1b:d2:f3:64:1c:b4:48:8c:
         92:b8:28:90:e6:e2:9c:59:40:6f:13:1b:d9:49:26:a4:27:d8:
         cf:c8:4a:14:bd:ad:49:5e:34:7a:6a:e6:03:33:22:e7:29:6a:
         80:9f:63:58:df:d1:81:0a:57:e1:ea:bc:29:55:b7:f0:2a:b8:
         83:7c:bd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:37 2026 by rpki-client