Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df8fc7f4-5488-36a2-a8d4-55b882f71028.roa
File:                     df8fc7f4-5488-36a2-a8d4-55b882f71028.roa (raw, json)
Hash identifier:          Qv89kPN3773YaRAUm4P8+QIthAMa+ZGMjgzJMIeRbVw=
Subject key identifier:   D1:DD:CF:64:59:24:3C:B6:48:F9:F4:C1:17:73:18:71:1D:12:A0:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7A0989B193C5ABE102E9F60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df8fc7f4-5488-36a2-a8d4-55b882f71028.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25485
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:98:9b:19:3c:5a:be:10:2e:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=79e4bea6-17b5-441c-897e-93fdab057738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:9b:99:82:79:da:df:74:d2:3a:12:da:0e:
                    a1:a5:90:2c:94:0b:3e:2d:b5:99:9d:72:d4:ac:70:
                    89:f5:cc:fb:94:cd:69:c2:af:d3:5d:77:d9:44:2a:
                    7f:d2:a1:d0:56:db:21:12:60:d6:ab:44:69:ab:03:
                    1f:09:60:21:f9:dc:02:55:95:2a:57:09:b2:00:6f:
                    c5:9c:f8:60:ce:d0:cd:e7:69:0e:34:82:0b:53:21:
                    2d:2b:a5:9a:12:cb:98:17:c9:de:d8:17:82:e6:86:
                    41:0f:58:21:15:1f:e8:70:33:40:09:f6:d1:ba:8b:
                    d0:cd:1c:c2:b9:2b:45:ac:ac:91:bd:9e:46:ff:72:
                    ce:57:b6:c4:34:27:13:ec:18:8b:a5:1b:ef:e9:68:
                    28:28:5c:19:be:68:d2:f8:52:bb:a6:82:a0:f6:b3:
                    d1:5f:33:bc:8b:6d:b7:78:75:7c:88:ab:5c:b8:99:
                    b0:ad:fe:2d:95:cb:1e:2d:31:cd:69:ab:bb:c6:3c:
                    e8:87:df:9c:d6:7f:38:f9:78:69:3b:da:4d:fe:e7:
                    98:c9:5d:c2:3d:e3:84:7b:6c:c3:c4:ea:8b:14:9c:
                    ed:18:21:8d:30:a8:31:fb:ae:8a:bf:19:74:af:af:
                    94:6a:9f:4b:fb:19:c3:88:7d:55:ab:34:a4:27:55:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:CF:64:59:24:3C:B6:48:F9:F4:C1:17:73:18:71:1D:12:A0:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df8fc7f4-5488-36a2-a8d4-55b882f71028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c5:12:83:c7:55:6d:15:53:db:03:fa:9c:2d:a5:aa:3a:09:
         4e:aa:f9:f4:7e:e9:b3:2a:e0:6c:65:3e:d3:cf:9f:24:b6:81:
         6b:65:7f:45:fd:c4:01:85:a0:23:a6:c0:d6:91:a3:93:04:ef:
         1d:df:63:0a:df:c4:72:df:ed:ce:db:30:ea:77:30:16:81:a2:
         2b:99:8e:f7:44:46:8c:e5:44:58:82:fc:39:8d:68:77:e5:50:
         05:f0:25:6c:31:07:b3:40:d7:a9:91:ad:2d:d9:4a:4c:a1:a1:
         81:77:64:b2:07:50:bb:c8:a0:88:f7:91:4a:71:20:a3:0b:b1:
         64:2c:0f:dc:9c:b1:26:da:c5:81:8e:23:9e:03:05:de:5b:e1:
         b9:0e:31:a7:22:66:c1:62:f9:ee:10:9f:6b:9f:0f:39:a9:5c:
         e2:b7:4d:64:30:7d:56:05:b1:82:2b:76:20:90:a0:02:a5:bd:
         65:5b:4e:18:fb:12:6f:05:b4:89:56:4f:a1:d6:c6:3f:b3:33:
         ca:a6:ee:7e:69:e5:08:1c:33:d0:df:da:f1:e4:e2:c1:0c:3c:
         7b:df:fa:41:de:2f:c4:f7:f4:8e:9a:0d:01:1a:0e:58:84:29:
         e3:3c:26:85:0c:ff:e5:15:8c:37:10:06:8d:fd:35:f6:a6:3a:
         0f:4e:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:53:14 2026 by rpki-client