Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96d957-e3bf-3be1-87ae-286f9ee71d63.roa
File:                     be96d957-e3bf-3be1-87ae-286f9ee71d63.roa (raw, json)
Hash identifier:          MZHO3FsTgz1T1QviC+OEqKQrKjd8Q0CvSkz5McWLXgk=
Subject key identifier:   37:19:8B:36:24:44:AB:02:1A:D2:88:91:4B:EA:3A:0F:25:74:DA:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7A0F67F5D8C02989B5B0000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96d957-e3bf-3be1-87ae-286f9ee71d63.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396565
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:f6:7f:5d:8c:02:98:9b:5b:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=abb15876-a2c5-449b-bf89-05ca50d10053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:62:90:14:ba:3a:41:0c:db:cc:49:71:ff:
                    a1:34:73:77:cd:88:8f:b0:fb:9b:16:b1:85:20:9f:
                    30:47:0d:27:e1:89:f1:49:5b:78:9b:25:69:bb:69:
                    64:d8:a3:01:10:88:d3:f3:42:84:bb:1a:cf:9a:e7:
                    c4:3d:3d:4a:85:b2:f1:7f:16:c1:46:ad:70:ca:35:
                    6d:4d:c0:18:f9:d6:c2:ce:f6:43:31:31:38:2f:96:
                    fb:63:78:be:78:dc:90:5f:2e:5b:92:c8:32:2c:ef:
                    a2:cd:fc:eb:2b:0b:e2:cd:6d:0e:0f:0b:22:be:d3:
                    ce:90:c8:8e:d2:0a:62:3a:63:1e:7d:de:19:a8:ed:
                    25:11:54:ad:4a:a7:a3:ed:36:ed:78:e1:8c:3a:ad:
                    53:78:bf:24:c5:c9:76:ff:f2:96:3e:6c:78:2f:15:
                    76:98:82:10:39:6c:58:60:64:77:b9:63:1d:0a:8a:
                    fe:be:43:ba:13:d3:05:a0:df:72:95:17:7f:69:d3:
                    a9:41:d6:ff:1d:5e:f7:d5:ee:ff:fe:77:22:5f:e6:
                    06:94:db:fb:b5:80:4c:66:e1:b4:c7:a6:2f:58:a0:
                    76:d1:6e:24:1e:07:31:7c:43:1d:53:90:6e:81:59:
                    3e:ed:be:ee:64:c9:b5:cd:c6:a8:11:cc:09:c9:e8:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:8B:36:24:44:AB:02:1A:D2:88:91:4B:EA:3A:0F:25:74:DA:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96d957-e3bf-3be1-87ae-286f9ee71d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b9:2a:1f:34:ae:aa:49:a1:69:9b:30:cd:e3:d2:4e:47:0d:
         9d:82:b0:0e:95:af:3e:82:4f:a6:ad:c6:b1:5a:43:59:c4:0a:
         1d:40:34:ed:d2:f4:e1:c6:3b:94:18:c2:c7:bc:5d:c6:94:3f:
         8d:3f:a4:23:08:1f:1a:f8:2d:d3:81:eb:7e:22:83:78:fc:8f:
         f1:31:c8:a3:aa:7b:a6:82:30:67:23:41:9e:f0:16:63:7c:56:
         9b:6c:02:03:25:ec:ad:e5:27:7b:2a:f6:8b:bd:11:41:d4:85:
         cf:d3:18:06:0b:01:da:83:d4:b3:dc:1f:47:44:2a:ac:bf:3d:
         51:45:06:eb:f5:8c:da:91:d3:62:6a:8b:1b:44:6d:49:90:6f:
         9d:3c:75:b3:8e:81:c1:c2:12:d6:4c:e4:8c:2c:94:f4:8b:38:
         00:15:34:2f:25:4e:6e:83:d6:40:c3:5c:de:16:99:4f:29:ea:
         cc:95:ca:87:d6:57:07:94:b2:8b:09:9d:1f:77:f6:76:86:6d:
         cf:5f:51:1f:f0:f2:f4:70:f0:0a:8f:8e:33:84:c9:10:ed:c2:
         69:c1:49:82:80:cf:9e:a4:ca:38:4d:72:56:d8:8a:8a:ee:8c:
         86:33:c0:a7:45:bd:9a:d7:ad:ad:52:4c:f1:e1:58:0c:91:b4:
         35:b3:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:43:04 2026 by rpki-client