Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3392cf5-f2ef-326f-b1cd-b80bdc7c398c.roa
File:                     f3392cf5-f2ef-326f-b1cd-b80bdc7c398c.roa (raw, json)
Hash identifier:          EG+6maqeQSB3JBznsj+Mo7X5trp5Ox/mo3ufSr+9I7E=
Subject key identifier:   B5:D0:45:DF:A4:B4:A3:EB:07:61:4B:8E:33:DD:6A:5C:E4:31:31:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB57C5956E053F4F27EFF4540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3392cf5-f2ef-326f-b1cd-b80bdc7c398c.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396586
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:59:56:e0:53:f4:f2:7e:ff:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=b0390b2d-f2d5-48bc-b4d5-f841453a4e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:a1:55:e8:4b:5a:f9:0e:50:2f:11:79:ec:
                    de:4c:fb:ad:92:a6:b9:d2:d1:dd:c6:4b:0c:52:0d:
                    bf:3a:fa:a3:c5:c1:de:4e:17:f7:92:a9:9c:2b:1d:
                    f4:96:44:83:8d:87:7f:a9:04:d8:80:09:63:5a:48:
                    85:c9:e3:4f:11:60:c8:95:c2:34:2f:e2:a9:9d:cc:
                    46:5c:6e:79:09:e1:fb:ec:71:fa:83:9d:d8:79:11:
                    cc:49:24:29:5e:34:20:bd:8a:e9:84:52:8c:66:97:
                    9b:2e:2d:77:89:77:27:6a:cc:c7:e4:78:b5:e4:d3:
                    93:5e:b4:73:56:0e:be:df:f4:a2:54:28:b8:dd:39:
                    ea:a0:96:66:4c:e2:c1:2e:71:d0:9a:97:a6:7a:d6:
                    04:3b:7f:96:d4:13:94:4e:1b:81:e7:a4:e5:64:62:
                    76:4d:27:cb:f3:97:a5:4b:2d:bf:66:0e:0b:d4:d7:
                    d3:8c:5d:4e:f0:d5:2b:96:5d:0b:f3:85:9f:b2:b5:
                    ca:15:57:35:b7:80:fd:f7:ad:43:2b:13:b2:d3:ae:
                    7c:4d:82:fd:fb:b5:6a:8d:f7:e3:f9:6f:40:b5:d1:
                    82:5c:02:82:eb:e4:58:85:57:ea:e4:fe:56:43:10:
                    a0:68:12:46:87:88:75:db:3c:20:ea:e9:83:e1:27:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D0:45:DF:A4:B4:A3:EB:07:61:4B:8E:33:DD:6A:5C:E4:31:31:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3392cf5-f2ef-326f-b1cd-b80bdc7c398c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:cc:a7:f5:82:45:62:94:7a:07:ec:e4:30:8a:bc:b5:01:f1:
         3b:3b:96:2a:82:63:e6:d5:f8:0e:de:ee:e1:43:50:d9:f2:36:
         88:a8:53:33:cf:c3:9e:f7:20:c4:37:6d:f2:f7:f3:38:1a:51:
         c7:39:8c:16:ea:58:0f:d7:ab:d7:f6:12:72:a8:34:8f:42:cc:
         52:12:66:67:bb:5f:98:bf:e7:6f:47:8a:70:bf:63:13:72:f1:
         3e:a8:3d:fe:39:f5:d6:6d:2d:ee:f3:a6:b4:88:7e:ad:e2:78:
         ca:1d:c0:11:70:8c:a9:75:da:bc:ca:6d:33:df:76:8f:21:3c:
         04:58:49:57:15:32:8e:47:15:2e:5f:9e:ba:72:19:07:9d:54:
         7d:8c:b7:70:a4:5b:ca:17:32:ad:26:f4:c0:24:bf:80:eb:2a:
         cd:32:b3:76:93:02:09:a4:24:45:72:16:9a:7b:26:fb:2c:a7:
         ac:41:3f:eb:ef:85:c6:27:f9:fa:02:1c:a6:f5:0b:30:8f:ff:
         6f:2a:27:0c:70:ad:f4:6a:a5:64:6e:23:f8:d7:7b:a3:ba:a1:
         14:72:60:c7:8c:07:3c:fe:27:6e:3e:c2:b0:74:73:80:b8:f0:
         5b:0a:2e:ab:b0:5c:b6:a3:d3:dc:ce:ac:75:ce:99:eb:06:7e:
         4a:64:b9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:34:27 2026 by rpki-client