Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18874e37-a187-3c98-969d-9a1d32069c15.roa
File:                     18874e37-a187-3c98-969d-9a1d32069c15.roa (raw, json)
Hash identifier:          Dg3OkeF6wUqoZ97YowRRmcnd/7Gg0uf6ssoyBJh9iJw=
Subject key identifier:   24:03:24:DB:65:9C:83:C2:6F:29:10:88:36:AA:EE:05:0F:B5:B5:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78FB30173C123E88EC7DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18874e37-a187-3c98-969d-9a1d32069c15.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396565
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:b3:01:73:c1:23:e8:8e:c7:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=34bf7b36-fa30-4f62-b0bb-21fc92a3d5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:b2:50:54:47:4a:a5:ed:a1:6c:fb:e2:b7:
                    70:89:17:d3:8d:06:7e:01:a8:d7:17:9a:35:bf:98:
                    2c:c0:0a:a8:f8:33:d7:dd:b6:e1:b0:a0:d9:0c:c8:
                    a7:f9:9f:8c:e6:3c:b1:e9:b8:83:78:cc:91:a4:f5:
                    ef:9b:f6:f4:8d:95:8a:c4:5d:25:db:5c:30:d6:a5:
                    8e:9d:27:36:57:81:99:8d:bc:db:0d:b9:41:e6:16:
                    52:43:a3:67:d6:5c:ac:08:36:46:0d:4f:be:25:cc:
                    68:98:ac:53:d8:ce:22:90:97:80:69:fe:85:51:c6:
                    fc:86:b2:39:43:11:b3:97:df:54:8e:31:90:3d:69:
                    f3:67:a7:41:ee:52:84:1b:bc:2c:34:bd:03:58:d4:
                    1a:4c:53:68:a6:0b:15:cd:5f:0f:dc:66:0c:0e:bd:
                    26:a2:36:8b:f5:74:a1:f9:82:78:e1:66:53:42:62:
                    6a:f6:c2:a8:eb:8c:63:b7:1b:9e:2c:8c:f7:ef:5e:
                    e8:c4:89:87:3b:fd:b4:a4:04:23:28:25:31:31:e1:
                    81:77:79:fd:b7:82:7b:4a:81:f1:44:87:81:1f:3f:
                    02:ae:f0:52:c6:4a:93:cc:86:2f:b5:80:85:9c:fd:
                    4d:dd:5e:6e:ae:f6:e4:37:38:92:2c:42:63:4a:09:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:03:24:DB:65:9C:83:C2:6F:29:10:88:36:AA:EE:05:0F:B5:B5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18874e37-a187-3c98-969d-9a1d32069c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:63:5b:69:e1:05:79:2e:4d:a6:79:0d:92:7c:83:71:34:fd:
         3c:b7:a1:04:e3:19:f2:a7:91:c4:b8:98:2a:f0:d8:47:97:b1:
         ef:9a:19:c9:b0:64:d8:d2:73:02:34:2f:a4:48:ca:13:cd:72:
         8e:41:8e:21:05:d2:be:8c:0e:8b:98:74:41:41:01:44:52:20:
         f6:e2:70:4a:d7:dd:8e:92:b4:36:eb:41:ce:df:ac:6f:f2:ae:
         1c:d6:af:c6:eb:2c:2c:45:1a:a6:d6:24:ea:94:d9:82:0d:e6:
         33:43:2a:07:a9:da:fe:7a:e5:7f:1f:4d:1d:e4:06:61:94:9f:
         e6:27:0c:6e:9c:0d:1c:c0:f3:7f:de:6c:96:97:9c:26:fa:85:
         ab:72:b9:e1:6a:d3:d5:47:ba:65:53:c3:b5:ef:24:9a:31:7f:
         76:2b:cb:51:63:ef:da:4a:0f:07:0f:52:72:dd:12:59:a1:8e:
         a0:51:1b:f6:18:f2:37:06:f4:95:6f:e1:e4:91:49:e5:17:d0:
         df:8d:6c:8a:c9:a6:d1:8d:9d:14:15:6c:41:60:21:9c:3f:cc:
         e5:97:be:81:ea:fd:a2:ea:f6:1e:11:7d:fd:71:74:01:a8:56:
         3f:e8:3f:bc:b5:52:cb:37:c0:75:1b:54:b0:27:b1:f5:19:5c:
         cd:ba:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:11 2026 by rpki-client