Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a09d03-0388-382d-ab98-39b1377fba1b.roa
File:                     48a09d03-0388-382d-ab98-39b1377fba1b.roa (raw, json)
Hash identifier:          0KhU8CQV82tlVmLXMsClSA6djK0P0QJgJyxrLDIwU3M=
Subject key identifier:   D0:DC:C5:B8:D9:E2:E4:39:9F:64:76:52:FE:43:87:4C:66:A4:C6:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B2510B296EF5CFAAFA65980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a09d03-0388-382d-ab98-39b1377fba1b.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     27544
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:10:b2:96:ef:5c:fa:af:a6:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=78148006-c470-40d7-bd42-efe75e63154b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:a2:92:b4:e9:f8:be:73:0d:51:d9:f4:4d:
                    90:b3:5c:c1:18:6d:11:0a:2e:15:a2:37:b8:22:f4:
                    34:ff:6d:09:9e:9b:ce:ef:50:07:0a:4f:67:df:7e:
                    32:ad:15:12:57:09:19:04:e8:86:ff:21:e1:30:ed:
                    8c:e6:03:91:18:73:8e:46:74:eb:2f:92:5c:78:a0:
                    03:a9:d4:ac:a2:37:93:60:08:ad:b2:73:e4:12:ee:
                    0c:e2:96:15:22:b9:e1:b8:7e:cc:13:24:cc:8c:ed:
                    07:cb:bf:fa:2b:28:79:f6:df:cd:41:e1:59:3a:2b:
                    2a:81:f8:8e:38:60:07:41:38:0f:a6:28:f4:87:55:
                    e5:1b:b0:d1:bc:e6:d4:a2:c1:be:32:31:bb:5e:48:
                    fd:ac:dc:c4:a1:db:a5:13:8f:61:cc:f0:8f:57:72:
                    24:9a:79:44:ef:28:cd:60:82:7e:b6:29:a6:5e:53:
                    d7:ab:4e:7e:be:8e:a7:7f:7d:6a:70:0f:24:73:10:
                    24:bd:2d:02:37:fb:aa:0e:5d:2f:32:4d:52:3b:e4:
                    3d:98:fd:3d:5b:6a:0c:84:dd:29:01:e8:59:ce:e6:
                    bf:02:6e:c2:9a:4e:05:f4:e8:c6:79:9f:0d:06:72:
                    2c:63:b4:dd:8b:f3:f3:55:47:80:4e:bf:31:57:7c:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DC:C5:B8:D9:E2:E4:39:9F:64:76:52:FE:43:87:4C:66:A4:C6:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a09d03-0388-382d-ab98-39b1377fba1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:79:5a:03:99:06:78:bb:fc:a4:93:ee:c9:3e:40:9b:96:
         07:4f:72:3b:c6:27:1f:ef:4c:25:c8:b8:9b:26:7f:c5:d0:40:
         58:0e:32:02:4e:2b:2d:23:a4:8a:8b:86:bf:8d:2c:76:71:20:
         90:ca:96:51:16:45:e7:d0:85:f1:c4:55:e6:f6:be:4a:49:34:
         b3:64:22:f2:58:60:78:d9:29:d2:b8:47:b4:8c:7f:aa:5a:0f:
         7f:5a:69:2b:6d:6c:ff:99:40:23:fb:39:e4:8f:ea:a8:9a:23:
         b3:f9:90:3e:02:fd:18:3f:50:84:91:6b:9d:3e:8c:84:e1:99:
         00:e8:f7:7f:69:11:1d:5f:5b:6d:10:fa:56:a4:3c:4e:0f:7a:
         68:40:b2:03:a1:76:b0:24:f3:78:94:02:59:28:36:11:dd:b0:
         18:f9:e1:96:b5:7d:ee:6e:49:59:eb:a3:b2:bd:cd:87:d5:34:
         10:7f:29:80:a1:e0:db:c4:c2:15:bc:96:45:f3:00:67:c8:35:
         c7:38:83:30:da:8c:4d:2c:ea:9f:15:14:93:38:5d:98:40:6b:
         d7:5f:33:89:4f:89:ef:fe:80:c0:7e:8f:0e:14:81:56:1f:97:
         92:df:60:a5:a3:fa:ae:73:b0:0f:7a:9e:b4:8b:66:00:e6:b4:
         b1:25:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:13 2026 by rpki-client