Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b2ab2b2-fc28-3f52-bffe-6a3917bbc08d.roa
File:                     5b2ab2b2-fc28-3f52-bffe-6a3917bbc08d.roa (raw, json)
Hash identifier:          Qdv7jdBCpwlDPxgOfMsXgWQVz4Ufr8QuYxkTNN9fHoQ=
Subject key identifier:   14:1C:88:00:6E:D5:0C:C5:6A:AE:DD:FD:18:58:9A:DB:51:10:70:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB57C523C22713962234C1900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b2ab2b2-fc28-3f52-bffe-6a3917bbc08d.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396591
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:52:3c:22:71:39:62:23:4c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=9c016b02-772e-4e57-9b0c-94e16c853f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:4a:a9:c2:88:cd:29:a3:9e:36:45:db:5a:
                    3d:18:4a:c2:5a:ee:ea:dc:f7:53:e6:d3:f8:e9:c5:
                    f3:ce:ab:10:cd:6b:0d:ac:ed:04:f4:4d:52:d9:3a:
                    02:4d:4c:d8:8e:f5:95:c0:8c:f1:fc:85:50:24:6b:
                    29:56:28:e6:ec:ab:d3:ac:03:2c:f9:8a:74:aa:b1:
                    2d:5f:47:6d:6d:d0:b8:bf:53:a2:01:38:4e:82:54:
                    d8:3d:86:d4:dd:c2:0e:e8:da:12:e6:7b:92:e6:68:
                    48:69:f6:76:a7:87:c2:71:85:6a:d9:16:a6:85:61:
                    6c:51:19:81:ea:e7:cc:2a:c2:d3:7e:53:b5:b8:e3:
                    9a:3d:6d:d1:b3:cb:bf:c9:9d:f9:dd:df:8b:bf:ec:
                    3b:c8:82:c7:e9:2c:6f:b6:c0:62:e9:a7:10:ed:da:
                    b4:16:6c:2e:0a:be:95:89:7e:e6:3b:da:3a:5b:ba:
                    55:d0:aa:fe:36:bc:7f:65:37:90:f3:89:82:e6:2f:
                    c1:35:c1:52:c0:64:92:60:ef:98:c3:e9:3c:76:07:
                    03:18:84:11:54:e7:59:6c:c2:07:6b:d0:a8:87:f1:
                    0a:69:9d:b6:04:c9:bd:e0:b9:68:39:d3:a5:0c:ed:
                    9f:c5:27:b9:fd:90:8b:75:00:c0:f8:58:e5:80:9e:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:88:00:6E:D5:0C:C5:6A:AE:DD:FD:18:58:9A:DB:51:10:70:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b2ab2b2-fc28-3f52-bffe-6a3917bbc08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:da:c4:58:84:0f:2e:8c:c2:d4:20:a2:3c:96:70:f8:4e:93:
         90:d5:6e:23:18:77:b7:b4:66:9b:b0:4a:c7:d2:61:66:ee:25:
         d1:5a:c6:95:46:d7:2e:0b:e3:11:4c:84:f7:79:ca:99:16:9c:
         f0:46:fc:39:a6:a1:22:9c:02:b9:bd:43:60:c9:54:45:a1:f7:
         06:47:0e:8f:0f:87:2d:cb:f3:d3:40:39:1b:65:86:a6:35:74:
         5c:bc:bd:43:a2:de:23:d1:37:dd:5a:28:b4:c3:7b:b2:79:f8:
         46:b0:b7:a6:f6:ef:19:a7:b1:48:23:fe:52:b8:29:d5:5c:82:
         5e:fe:2f:e5:c1:8a:e6:dc:a6:54:7c:b5:a7:08:77:62:eb:f3:
         e2:bb:72:58:88:3d:e7:90:c4:25:69:bb:03:01:f2:de:7b:1f:
         de:79:78:97:84:b4:52:d5:c7:e2:fe:ad:43:14:eb:3a:14:cd:
         8b:30:31:17:82:53:e4:d0:cf:5e:10:26:33:6f:52:bf:88:e5:
         00:25:7b:fd:8f:85:11:91:6c:a9:73:ce:ed:3b:83:6a:da:e7:
         46:3c:0d:de:cf:e9:6f:fa:52:31:a5:a2:3a:ad:3d:61:8a:2b:
         00:31:ad:6d:fc:e6:a1:ce:68:47:6f:f0:73:c0:cc:23:25:f8:
         b0:49:83:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:16 2026 by rpki-client