Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ea1413-c733-329c-8ed4-52565b60bd64.roa
File:                     32ea1413-c733-329c-8ed4-52565b60bd64.roa (raw, json)
Hash identifier:          EfQcpcrjR1s6G38I7L+28dVMtgwEPPa6IcIDIbk2C5s=
Subject key identifier:   EA:67:CC:4D:BF:6A:5A:14:0F:2D:6C:07:44:FC:98:C4:A0:39:FE:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7BCA2C91031AF682ECF2E780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ea1413-c733-329c-8ed4-52565b60bd64.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     397194
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2c:91:03:1a:f6:82:ec:f2:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=9bd1f7cb-adc7-41ee-9336-54e092c6b0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:96:ab:93:6e:a4:da:be:9e:8e:a6:aa:ee:
                    50:46:23:41:1e:9c:0d:03:ed:9d:b0:fd:08:65:e9:
                    60:9f:d3:c1:1c:6e:de:cb:d1:ad:cb:ae:b9:97:ac:
                    97:0e:88:19:cb:4d:6a:c4:6f:51:b4:73:99:b1:68:
                    a5:a9:9a:fc:81:2e:c2:8a:a3:ce:98:13:ab:1c:7a:
                    93:2c:a0:f9:4b:f0:5e:7e:91:84:bf:39:30:f2:3a:
                    f3:7c:2e:45:31:1c:8d:97:79:dd:78:9e:ba:43:97:
                    29:8e:4b:f2:1d:59:a9:aa:a4:72:94:70:5a:3f:70:
                    6e:de:4f:c3:df:da:3e:4b:70:4b:c2:1c:b5:ef:44:
                    db:60:49:9d:6f:c3:a3:b4:5c:bf:e9:9b:b3:0b:77:
                    c3:d2:16:7c:2a:96:90:a3:c2:38:98:b3:a8:3b:4d:
                    d9:a2:66:48:20:65:92:20:1c:7b:81:bf:7d:cf:31:
                    75:26:cf:85:7b:cd:fa:9d:36:7f:65:35:64:9a:f8:
                    b9:fa:5c:64:a1:93:b9:56:9c:cf:88:38:8b:1d:43:
                    68:e8:a3:23:ae:fc:09:38:fc:b2:e7:ff:9d:1e:4a:
                    35:3c:02:57:2b:0a:72:bc:3d:1c:aa:25:9b:00:9d:
                    07:33:83:cd:3e:76:26:86:46:d5:c1:97:ab:77:b3:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:67:CC:4D:BF:6A:5A:14:0F:2D:6C:07:44:FC:98:C4:A0:39:FE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ea1413-c733-329c-8ed4-52565b60bd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:52:b1:7d:b1:c0:6a:1a:8d:bb:0b:32:da:34:94:94:92:
         5c:be:b5:59:f5:95:2e:ee:9b:79:ab:da:3e:4f:05:f7:e8:c8:
         2d:e3:fb:3e:d1:5c:fa:61:35:c8:67:46:be:2c:f5:e2:05:4d:
         03:70:a6:c3:d4:2f:73:8a:46:4f:1f:93:03:01:de:c6:b2:db:
         55:c4:4a:b0:db:ba:2c:2b:e3:e2:df:38:9b:ec:cf:54:ae:b0:
         32:7e:ab:23:e9:0c:49:35:2b:ae:b0:0b:5b:11:2c:a1:4c:10:
         dd:db:f7:15:b5:d9:5c:b3:03:31:cb:52:1c:a2:4c:93:3f:32:
         56:94:09:ae:06:66:35:ae:07:6e:43:e1:bb:6e:b4:85:df:e7:
         e8:2b:21:81:4a:cb:5b:b9:bb:6c:c0:ba:91:f0:9a:c5:98:62:
         6f:e4:6a:8e:a7:19:cf:24:41:7a:5a:5d:82:cf:2d:fc:6a:0c:
         c6:3e:97:e4:75:d2:67:63:e3:8c:36:f1:11:42:77:68:e7:46:
         4a:7d:31:5c:c0:14:60:a2:33:6c:eb:b2:59:ac:98:39:64:94:
         40:df:45:24:65:eb:d5:4a:0e:ad:0a:64:1a:ff:ca:2a:df:97:
         2c:bd:5c:82:4c:a4:db:e1:36:a8:41:87:54:b0:76:22:ba:bb:
         eb:e2:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:13 2026 by rpki-client