Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/166e0d9d-1f84-394d-8fd5-5b0cd59d90b9.roa
File:                     166e0d9d-1f84-394d-8fd5-5b0cd59d90b9.roa (raw, json)
Hash identifier:          DZE9AmT9s79/IIis0lTGstDmXeOb4YsHear1nZb+jrc=
Subject key identifier:   63:33:F1:26:48:EE:B2:8A:68:73:41:42:28:C5:23:19:3E:2D:92:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B24E91C88BD4489892CEF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/166e0d9d-1f84-394d-8fd5-5b0cd59d90b9.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     396565
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:e9:1c:88:bd:44:89:89:2c:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=a6310993-1210-4405-a4af-be797947d2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:77:37:9a:7e:9c:37:c2:fc:32:5a:99:2e:
                    7f:97:bb:0d:eb:40:4e:ac:01:d1:84:41:93:c9:6b:
                    33:f1:ad:79:42:1c:d7:1c:8d:4b:cd:54:87:7f:6c:
                    59:2c:13:8c:a9:84:1c:55:ee:1c:4f:d5:13:9c:a4:
                    0b:15:13:7d:7b:52:a7:e4:1a:a4:fc:7e:52:16:d5:
                    01:b6:e1:3a:f6:de:1b:22:cd:94:13:90:66:3a:2a:
                    f3:1f:57:ce:b4:79:26:d7:14:26:6a:6a:18:ca:43:
                    23:fe:1d:76:e5:54:03:dd:e4:51:01:3e:47:a7:03:
                    35:83:e0:62:83:56:3a:0f:c7:69:dd:00:95:dd:d1:
                    99:c0:bf:06:9f:7f:8a:6e:cd:8a:ab:88:8b:3b:69:
                    32:1a:aa:aa:8f:1f:68:ca:e7:46:cd:75:9f:a2:10:
                    44:17:05:b3:23:6b:f0:95:94:76:d2:92:74:d4:12:
                    6b:b2:e1:04:5f:ea:7c:64:9f:0c:60:70:61:b3:f6:
                    88:b3:4b:11:ec:4e:69:10:72:b4:4b:24:6d:2a:43:
                    e5:55:d1:36:24:53:47:09:8b:b6:ab:d6:3a:7b:a3:
                    08:f1:5b:8b:0d:dc:c4:4d:22:f8:6e:a3:13:ec:2e:
                    ed:a7:6f:ba:3f:47:4e:a6:95:12:47:d3:d4:4e:d6:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:33:F1:26:48:EE:B2:8A:68:73:41:42:28:C5:23:19:3E:2D:92:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/166e0d9d-1f84-394d-8fd5-5b0cd59d90b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:3b:6c:7a:3b:77:f6:cb:1a:25:8f:40:60:70:1b:73:82:
         ad:32:9b:88:a4:2b:8f:c2:54:41:21:5d:2b:8a:49:d3:ee:0a:
         03:e7:c0:9f:5d:e2:3f:75:69:99:f5:58:b1:9f:a1:27:d1:2d:
         25:7e:69:1a:db:dc:a9:a8:64:71:4e:c6:a1:9e:a2:25:e7:a7:
         ac:e7:57:ac:b6:af:7c:10:87:b5:58:a0:39:ba:39:c4:5f:11:
         25:bd:e7:ff:92:3f:21:ea:33:46:68:6f:15:c4:49:70:92:5d:
         53:6c:84:ab:24:62:d2:5a:93:4d:a0:1a:e9:e0:ec:22:9f:a3:
         fe:d9:18:20:d7:21:91:3b:b5:e9:c1:d5:66:14:6d:37:8d:43:
         29:76:73:ee:94:ab:66:27:99:60:e1:71:a3:a1:cc:92:6b:d3:
         3e:03:a9:a9:52:0f:c1:8b:c3:c1:c8:03:7e:1f:27:e2:c1:8a:
         6b:7c:aa:7d:ae:13:e8:65:c3:ee:62:32:fb:10:34:2d:4e:1f:
         c5:ea:91:63:b9:a0:0c:73:ed:52:aa:07:48:cc:e3:a5:ef:47:
         af:b0:70:a8:c9:4a:4a:d7:cc:20:6f:db:75:ab:9c:6a:d2:09:
         8c:ce:70:a0:74:f0:97:7c:0f:a7:b5:a7:f7:e3:44:7e:25:fd:
         3d:92:2c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:32:07 2026 by rpki-client