Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d96e2413-b1a5-3d2e-baea-fd8674eab716.roa
File:                     d96e2413-b1a5-3d2e-baea-fd8674eab716.roa (raw, json)
Hash identifier:          +U0fhLlpCweD/xgTnnc0Du7ZU6GmIIaxqXH4JVPGcdc=
Subject key identifier:   98:31:A2:BE:1E:CC:47:35:3F:CE:0D:D7:F8:08:F3:A3:F6:62:94:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE2273D9046FCF2CE90A29A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d96e2413-b1a5-3d2e-baea-fd8674eab716.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     36618
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:3d:90:46:fc:f2:ce:90:a2:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=369873e5-8612-4fe8-8f8b-840f32537807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:b0:ed:89:7b:62:27:81:77:9d:69:23:a8:
                    92:a0:d4:61:78:db:24:ec:3e:21:d6:45:fc:f6:eb:
                    f6:8e:2e:f7:ec:96:02:4e:1f:04:b7:0b:c0:ae:f5:
                    18:89:11:06:db:6d:04:d3:b8:56:23:39:a3:e7:a7:
                    b0:5e:a3:e6:05:48:9e:de:6e:4f:b9:5a:72:17:ca:
                    a5:4d:a5:07:00:30:e1:94:62:c5:ad:e7:3b:99:b0:
                    68:22:18:e4:29:cd:65:7d:d6:c4:1f:2f:5b:3b:d8:
                    d8:ba:70:a6:d8:f7:9f:08:24:a0:6a:a3:aa:0d:9f:
                    12:c0:ea:58:d8:9c:89:ea:18:aa:7a:41:01:94:1b:
                    23:3d:58:45:55:87:7d:63:c3:c9:71:13:46:2f:8b:
                    e1:cc:52:d0:f3:6f:d4:fa:32:53:29:c3:db:f1:40:
                    7f:ec:e8:02:fb:f0:6b:77:1f:d1:1f:e5:11:5b:a5:
                    b5:a4:0a:c7:23:1e:2d:c5:7a:8c:80:92:3e:b9:f5:
                    b9:e5:b5:02:bf:ef:d2:e0:87:8d:43:17:53:9d:ed:
                    31:d3:b7:37:eb:98:37:ed:05:22:f2:c5:fe:4f:bc:
                    89:0f:29:29:9c:cb:25:4e:71:d7:52:7d:ee:1a:00:
                    95:b9:b2:f9:42:91:d5:d9:08:6f:10:b1:16:32:e7:
                    23:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:A2:BE:1E:CC:47:35:3F:CE:0D:D7:F8:08:F3:A3:F6:62:94:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d96e2413-b1a5-3d2e-baea-fd8674eab716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:99:0f:bd:e5:8f:ef:e8:12:a2:65:49:d8:bf:2b:34:0e:46:
         69:41:f2:c4:48:79:8b:82:da:c5:71:e4:71:ae:db:c7:b7:e3:
         95:4d:ce:1b:67:30:b4:04:01:0f:33:35:7a:a1:dd:4b:1b:59:
         0f:f8:ad:d7:eb:ca:3e:8a:00:44:23:02:b8:d6:a5:b7:e2:7c:
         d2:84:31:bc:c6:45:8e:ab:8a:32:d0:af:e7:00:05:e5:e3:81:
         f9:fb:10:c2:58:34:38:de:66:cf:12:bf:50:68:22:3d:91:7a:
         61:41:d7:10:8b:d2:f8:91:17:f4:30:66:aa:99:79:3b:c3:95:
         e5:f8:ca:8f:a4:7f:41:c5:92:f0:70:1f:e1:ca:f0:db:ce:63:
         10:72:fe:f4:95:64:f4:9d:5e:c0:7b:65:b6:54:8a:d8:60:da:
         8b:63:fc:2c:73:10:23:77:48:29:a4:bf:b8:5d:5c:1c:70:d6:
         b6:42:4b:6b:34:86:e5:02:6f:d0:b2:2b:8c:eb:7f:aa:f9:1a:
         de:e1:55:1c:b9:b3:9c:9e:0f:f6:e3:7f:3b:84:30:f6:ad:04:
         ab:10:69:6d:87:21:4e:62:0d:17:99:f9:a7:02:29:26:95:64:
         5c:3c:92:1c:ea:74:24:60:f3:d6:49:d5:eb:b2:a1:71:89:9f:
         f1:3a:c1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:10 2026 by rpki-client