Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e99b571e-ce5a-354d-9afa-99bcd18f3c5a.roa
File:                     e99b571e-ce5a-354d-9afa-99bcd18f3c5a.roa (raw, json)
Hash identifier:          Q+n7Pie25BTnmPfOlTVo5P4JH4Fba1wCmlOstFILfvI=
Subject key identifier:   0D:6B:0A:F1:58:72:5A:56:7D:EA:90:06:0B:30:A9:5C:55:1B:E3:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79CF52BA577FC4F33187E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e99b571e-ce5a-354d-9afa-99bcd18f3c5a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396553
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:f5:2b:a5:77:fc:4f:33:18:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5df504eb-bdc1-4328-9356-a770d86cda47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:bc:f2:b3:09:10:2d:c5:47:bb:af:62:3f:
                    eb:8c:67:1c:97:ed:44:54:8e:20:36:61:1e:d9:d0:
                    d0:c1:be:ad:87:06:e0:a0:74:47:96:31:19:49:b9:
                    2e:e1:42:fd:af:a7:28:a4:1c:5c:fc:72:4b:44:b3:
                    b5:da:7a:0e:fa:01:d7:c0:8e:cf:5f:19:07:68:a2:
                    3d:e2:fb:fc:24:0b:15:ee:be:c2:4e:6b:93:14:ce:
                    16:84:12:ac:3b:ba:74:81:58:01:89:01:c7:3a:2e:
                    e5:4f:34:67:d4:cd:1f:98:b3:6d:fe:49:1c:1e:ab:
                    3e:a7:d1:38:b1:67:9d:00:cb:88:5f:a3:15:c0:c0:
                    e3:aa:cc:a3:73:49:65:31:2f:c6:5c:b8:02:3f:f1:
                    52:27:5d:d8:10:1c:7b:23:7d:20:51:af:62:1a:bf:
                    42:b8:de:7e:e7:7c:b1:5a:55:f2:fb:32:68:7a:c0:
                    ae:98:c0:01:de:a5:d4:51:63:8c:e6:60:bc:c5:6c:
                    08:75:a4:85:d2:8a:c7:2c:bd:06:55:cc:02:81:d5:
                    56:82:a8:7c:70:32:0d:77:83:fe:d7:4a:1a:99:96:
                    5f:16:1d:c0:ba:a2:98:a2:50:8f:66:1d:62:7b:61:
                    60:49:93:c8:9a:23:4b:94:3a:03:b8:8e:7a:b0:9c:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:0A:F1:58:72:5A:56:7D:EA:90:06:0B:30:A9:5C:55:1B:E3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e99b571e-ce5a-354d-9afa-99bcd18f3c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:16:c6:c9:50:41:c9:77:8f:c7:f2:57:e5:67:a7:71:3a:e1:
         27:11:70:09:87:a8:00:6a:24:bd:3d:54:7a:4e:e1:58:bb:cd:
         33:8d:f3:d2:11:33:f4:cf:f3:83:ab:08:2d:8e:ef:68:6b:43:
         e4:ab:62:1e:8a:a9:7c:b9:fd:54:d6:10:1d:ae:e9:55:d4:15:
         ee:20:1d:cb:6f:44:7f:17:62:31:a5:ff:67:2a:86:3c:59:6b:
         ec:f5:90:79:53:c3:99:49:a3:a4:60:2f:80:b4:fe:2c:ab:03:
         60:5b:68:f5:18:ea:01:7d:f8:e2:0c:8a:ed:62:8e:0b:02:a2:
         38:95:37:85:14:8a:af:59:d3:56:f5:15:37:fc:96:d5:f5:7c:
         8f:56:9f:db:6b:86:b1:9f:3d:19:f9:68:4e:c9:e6:d5:a1:36:
         65:f2:a2:75:90:47:aa:86:36:79:3c:b5:4b:a8:9d:b6:7f:33:
         4a:62:f4:2e:96:ad:ae:1e:2a:93:fd:d4:d8:94:1c:d4:c1:16:
         31:dd:65:51:48:8a:67:8f:a0:00:ab:28:ce:d6:fd:a5:1e:50:
         0b:64:35:07:e5:d9:07:e9:0a:e0:3b:bb:cb:79:7f:84:6b:2e:
         1f:17:c3:0a:df:de:00:1c:ce:55:63:17:84:4f:15:1d:a0:af:
         d7:65:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:12 2026 by rpki-client