Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77caa4f-1d91-32f9-8135-fa8ff535daef.roa
File:                     e77caa4f-1d91-32f9-8135-fa8ff535daef.roa (raw, json)
Hash identifier:          RxSpBnq21IXhoMgelv78SXRXmmz0gKulkZW7MsA6kr4=
Subject key identifier:   95:AD:B8:0E:73:40:A8:48:6D:47:28:97:7F:01:39:5F:47:27:96:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB57C4EA5C8E99066E27CB720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77caa4f-1d91-32f9-8135-fa8ff535daef.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396617
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:4e:a5:c8:e9:90:66:e2:7c:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=629d4457-50fe-4cb9-8aeb-08fd0a7d3926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:05:29:40:27:b8:d8:4e:c8:30:5a:a9:ae:
                    51:11:16:4e:d8:f6:95:cc:e8:82:fa:a4:78:c0:a8:
                    ee:51:c8:e1:f0:ed:d2:b5:f8:38:ae:06:97:fe:1f:
                    e0:3e:82:83:f3:a1:88:3d:d0:f2:96:90:de:59:14:
                    1c:61:d2:30:00:d4:dd:20:6b:d7:69:9d:d3:cd:20:
                    db:89:fa:19:95:49:ba:b9:1f:7d:fc:f3:59:00:67:
                    52:2d:11:ea:d8:da:b9:31:2a:24:a7:13:9d:49:20:
                    20:b1:c0:26:90:2a:68:e6:91:48:6d:6e:3b:ae:34:
                    58:3f:6b:d5:f0:6a:f6:f9:a7:a3:4e:fe:58:77:31:
                    31:05:e9:70:69:51:68:6d:34:6c:13:24:dd:42:57:
                    6e:df:4b:9a:b4:a7:4b:92:43:ae:c2:1c:21:76:ac:
                    ef:0a:ae:28:84:ca:1c:22:b8:6b:27:c7:26:62:f2:
                    0c:c4:c7:ca:c9:e3:d1:1f:3b:8e:76:e1:99:52:66:
                    77:4a:7a:4e:4f:16:1a:8b:c0:c9:fd:8b:8a:29:a1:
                    b1:fd:08:9d:b7:5f:17:bc:e1:a8:12:d6:bc:0b:23:
                    b2:bb:7b:46:66:92:09:c5:99:4c:88:8e:c7:90:66:
                    f0:b6:f1:f2:7f:d1:41:7c:73:95:e7:1f:b2:c0:40:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AD:B8:0E:73:40:A8:48:6D:47:28:97:7F:01:39:5F:47:27:96:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77caa4f-1d91-32f9-8135-fa8ff535daef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:44:0c:50:e8:db:c9:a1:ab:7f:0a:4a:98:26:fc:a3:eb:9f:
         57:11:17:00:c1:9f:2a:64:dc:27:9b:0c:2c:7e:26:66:85:a1:
         47:8e:71:26:d7:2a:df:c5:f8:52:87:9d:8c:6b:77:3c:f1:4b:
         29:d5:dd:f3:14:a5:3c:c5:08:c7:26:16:19:d7:9f:1c:89:d1:
         3b:43:1e:d7:b9:82:05:6a:70:e9:c6:a9:6d:ab:e4:ed:fc:65:
         ec:d1:c7:b2:79:b6:4c:51:ea:f2:19:77:8c:1b:75:e9:bf:1d:
         06:13:7a:f5:da:ea:89:90:c0:af:0e:d6:b9:09:e4:7d:28:49:
         35:4d:1e:d0:2a:d4:ea:3d:10:d1:7c:0f:e0:f5:7e:b2:e5:ab:
         55:12:b6:52:88:f4:45:53:f2:22:ce:45:55:90:2f:4c:20:b4:
         ed:a2:62:0b:6b:eb:4a:5a:31:3e:58:97:a7:88:8b:e2:b9:63:
         ad:e8:97:8a:35:11:df:29:69:6b:53:d3:27:39:76:96:e5:ed:
         b6:37:5c:60:ce:56:54:63:e2:fc:e5:e3:9d:5c:f6:cc:b3:f5:
         01:9f:fa:a3:d7:43:d6:41:78:8f:d5:b2:a5:ba:2a:89:1b:ad:
         65:f8:da:82:68:a3:cd:07:0a:14:b5:15:b9:20:c8:1b:98:aa:
         89:b0:80:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:14:57 2026 by rpki-client