Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f538b7e-702d-3fb0-96f2-ff46f3e64de9.roa
File:                     1f538b7e-702d-3fb0-96f2-ff46f3e64de9.roa (raw, json)
Hash identifier:          oMZSv+CJYUTcv8NqW5DigoNEq3X78wh9dstMoc/IsZY=
Subject key identifier:   BD:A8:E8:0E:CD:7C:EE:F5:14:6E:7C:57:CB:84:66:48:F6:28:99:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7878CECA9C05080ADFD2500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f538b7e-702d-3fb0-96f2-ff46f3e64de9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396611
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:8c:ec:a9:c0:50:80:ad:fd:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=53caad05-6a08-4443-be7d-81fec133467a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:56:3b:ff:b2:03:55:08:78:69:c4:48:b8:
                    f8:27:84:3c:39:e4:95:cc:69:98:0e:f0:6b:e3:11:
                    cb:1e:e3:7f:a9:e2:25:ac:ee:1f:e2:39:21:8f:c1:
                    8a:fc:45:ae:72:81:f0:2d:62:36:a5:8c:5e:37:15:
                    1d:2d:b2:e2:61:86:a0:94:d0:a0:6d:f8:be:cd:b5:
                    ad:a1:85:49:c0:0e:c7:38:ba:79:13:68:7c:87:7a:
                    c1:b0:6c:19:18:96:80:db:e7:71:22:f0:2e:e6:75:
                    d7:34:ee:a9:2a:66:d6:84:2a:2c:9c:68:9c:9f:a2:
                    58:2d:ee:15:8b:85:c7:b5:14:5f:01:b5:a8:71:f8:
                    2d:fd:e7:7f:d8:ba:2e:1f:55:5c:49:18:f3:8b:3c:
                    73:f8:bf:6b:32:b3:d5:b1:6b:77:52:c5:ff:6c:51:
                    60:c8:d5:60:d5:6b:a6:7d:b8:0c:0d:ba:71:63:5f:
                    ad:39:82:a7:3c:ae:1e:fe:7c:38:62:1b:56:2f:98:
                    af:6d:7b:58:bc:8c:24:15:a0:ce:e1:f2:11:1d:d6:
                    28:b1:91:28:cc:76:37:5d:c7:c7:56:03:b8:35:bd:
                    f8:66:81:d5:9a:bb:c2:fe:3b:a2:1f:ba:9d:f6:4a:
                    b2:12:ef:ea:bd:24:1f:90:8c:c5:7b:33:93:f3:27:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A8:E8:0E:CD:7C:EE:F5:14:6E:7C:57:CB:84:66:48:F6:28:99:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f538b7e-702d-3fb0-96f2-ff46f3e64de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:64:6d:87:7f:b2:c5:f4:95:f2:c4:1a:e9:d1:56:2b:c6:b6:
         e2:49:fb:40:df:61:41:36:c9:e8:94:8b:8d:21:15:6f:85:34:
         06:61:ad:65:8b:76:93:8f:43:53:ec:24:77:a3:ba:65:c3:99:
         0f:d5:f4:05:a5:5d:24:03:79:52:bd:e4:50:b4:78:bb:16:3d:
         e9:0f:17:58:73:e3:e8:f2:48:6c:75:d7:8f:c8:24:04:5d:41:
         52:a2:2b:9a:15:05:60:75:67:ea:14:61:c9:57:a1:46:4c:7e:
         2d:aa:86:f7:69:10:cf:a7:9d:9f:57:97:7a:e7:52:06:34:ac:
         d9:65:9e:06:db:6e:1a:a5:15:e0:6d:16:56:f0:4f:1e:92:cc:
         ef:93:13:bb:6e:34:c3:9b:a5:68:1b:16:cf:ee:1f:a2:2a:d6:
         6b:ce:95:10:b2:f8:c5:6b:84:df:79:c0:ca:ef:c0:a7:d0:2b:
         6a:2f:2f:c4:5c:a1:2d:55:c7:22:ee:8f:e7:f9:4d:90:45:29:
         d5:df:1d:ad:21:4c:27:80:2e:80:46:89:29:a7:fa:4b:0e:cf:
         42:6f:5a:ce:b7:06:5d:fb:d9:0b:6f:c1:b7:22:d7:40:6c:c5:
         6a:ff:a4:cd:97:4e:67:77:ea:03:08:81:f6:c1:e5:31:e1:b3:
         84:e1:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:14:56 2026 by rpki-client