Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08f07dc9-f9aa-3bec-bb19-0cbedba9af1d.roa
File:                     08f07dc9-f9aa-3bec-bb19-0cbedba9af1d.roa (raw, json)
Hash identifier:          5j0jHrvlkFWVPruA9IH+4jrldd+RmJXdV2YqoVBdDSc=
Subject key identifier:   40:E7:37:C4:57:46:4B:5A:92:3E:40:F1:52:B1:18:09:E9:53:48:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79B346AA1A3A87ECC948C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08f07dc9-f9aa-3bec-bb19-0cbedba9af1d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397193
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:34:6a:a1:a3:a8:7e:cc:94:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=05f7ca79-c5fc-4148-96ef-0a7f2de9d223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:4e:ad:c0:b9:82:e4:b0:ae:e6:2c:d9:3c:
                    fe:47:5b:68:25:32:65:95:83:63:65:98:9a:c2:92:
                    41:c4:48:97:cb:72:b4:7f:a9:fa:f9:d8:4d:9c:d0:
                    21:59:64:5c:98:a7:03:a6:59:c6:47:ce:1c:b7:ba:
                    de:d6:65:6e:fe:44:5f:a2:07:d8:47:6f:09:69:4e:
                    75:8b:93:3d:6d:df:34:9f:83:26:6e:a9:50:1a:28:
                    c7:3e:a8:9a:c8:d1:e6:4a:9e:89:ed:58:4f:86:68:
                    bf:65:b8:28:97:e0:cb:f5:ed:d1:27:e5:49:51:f4:
                    21:2d:ba:79:46:0c:2d:5f:14:e3:25:2f:0b:8a:ea:
                    3b:fb:b3:c7:0c:33:19:76:59:09:20:d9:01:d5:c0:
                    cf:21:17:4b:85:8e:45:a5:0d:1d:24:d5:d7:ff:74:
                    13:5b:b8:1e:c9:8d:ff:3b:c5:2e:20:f1:e4:6b:47:
                    18:43:df:97:99:ea:bd:e1:f8:ae:23:f4:da:99:9a:
                    e0:22:85:2d:f3:88:2a:05:48:e9:ee:1c:70:27:da:
                    e7:4d:44:a4:32:a5:94:f3:cb:01:ab:ca:1b:eb:d2:
                    21:a6:93:23:d5:fa:cb:1c:22:95:60:62:6a:90:5b:
                    8a:e9:00:3f:10:a3:78:61:b3:6c:c7:96:c1:63:53:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E7:37:C4:57:46:4B:5A:92:3E:40:F1:52:B1:18:09:E9:53:48:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08f07dc9-f9aa-3bec-bb19-0cbedba9af1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8c:5b:e6:b1:49:79:58:9b:e6:2e:bc:e8:48:a0:60:ae:43:
         84:82:a4:38:14:2e:9f:4c:e9:61:b1:15:ee:48:2d:b9:70:00:
         28:6c:5a:47:c3:24:bd:b8:7b:ba:21:46:46:e8:fd:75:16:09:
         49:eb:14:86:d0:a7:2e:0a:3b:d9:10:d7:1a:ee:f5:e1:34:1c:
         18:62:1b:0c:cd:58:f5:3c:72:6d:e9:5c:ea:11:64:a0:62:9f:
         2c:17:3a:bd:e6:03:ba:8a:a7:68:1c:82:8c:9d:99:77:90:44:
         6a:ff:c4:33:8b:cc:ec:4c:96:35:67:49:33:0f:bf:56:d1:85:
         c0:ae:c3:22:35:9c:1d:d2:c1:53:74:33:c9:01:90:73:d8:f3:
         5c:2d:97:29:66:7e:57:a9:aa:cd:10:5a:c5:f6:6a:68:33:6c:
         b5:0e:31:1a:1e:82:c0:fc:8b:56:7c:48:09:b6:96:e4:ee:9b:
         f7:59:9f:1d:d8:1b:6f:ec:8a:75:1d:51:e0:4c:51:b1:ed:ff:
         67:8b:c1:c8:6a:78:0a:83:25:51:fb:9c:d3:c1:98:53:0b:15:
         11:89:3d:f5:26:99:6d:2f:77:dd:7b:07:74:53:33:8b:bf:4b:
         c6:5a:dc:5e:18:e2:f4:c8:db:43:59:49:ff:a3:2b:39:a8:3c:
         1f:2f:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:52 2026 by rpki-client