Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50b99e76-47cf-34fd-bb8a-1a24ee413d61.roa
File:                     50b99e76-47cf-34fd-bb8a-1a24ee413d61.roa (raw, json)
Hash identifier:          hZfkpyyjig6JCmDvdLmiBp/DRO0e5JeB4J+p6QwnSmY=
Subject key identifier:   44:D4:B4:A7:CA:A5:0C:EF:8C:90:1F:DE:E9:64:F8:42:80:B6:D4:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B24E6B880CF6136C9CC3580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50b99e76-47cf-34fd-bb8a-1a24ee413d61.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     396589
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:e6:b8:80:cf:61:36:c9:cc:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=ab08f4f6-8c22-42bd-a619-37d886ede384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e1:80:fe:e8:26:c0:92:54:44:60:44:d8:71:
                    5c:6e:9d:7f:75:45:54:1a:77:64:ed:0f:a3:31:d7:
                    e3:b6:f5:8e:37:22:b3:cc:92:c3:0d:42:02:b7:2d:
                    d9:bd:07:41:ed:b6:66:00:e0:21:f7:bf:2d:be:05:
                    99:8a:83:74:34:ad:30:16:9d:d6:4b:96:0a:23:4d:
                    a7:38:1a:12:cc:46:1d:7f:2d:f4:23:00:d5:74:87:
                    8a:29:4f:4a:83:8c:be:56:3a:bd:08:8c:47:26:3f:
                    9a:49:08:4b:ab:c6:c8:83:e3:8a:26:ef:db:ce:5e:
                    91:7c:0f:c9:ac:a8:e7:98:95:3b:a3:18:0b:1d:d9:
                    92:73:7f:8b:27:c1:20:03:d4:3d:f9:2a:c7:43:76:
                    33:06:c7:6f:13:ac:11:ef:d2:f3:33:b6:37:14:62:
                    f4:2a:5f:67:e3:51:a4:56:16:fc:46:6b:8d:2a:5c:
                    9c:6a:e5:e7:33:b4:23:6b:05:65:be:4f:85:9b:3e:
                    77:13:d6:e5:57:d6:bc:6f:0f:c3:1b:81:67:7b:50:
                    2b:3e:04:73:00:a5:02:e9:5b:7b:2a:ea:8c:96:ce:
                    c9:a8:22:36:d2:67:9a:53:e4:7b:1d:cc:8d:b7:91:
                    9c:77:de:67:9f:25:46:58:20:b6:32:de:93:22:a0:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D4:B4:A7:CA:A5:0C:EF:8C:90:1F:DE:E9:64:F8:42:80:B6:D4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50b99e76-47cf-34fd-bb8a-1a24ee413d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:04:74:85:aa:92:eb:92:f9:56:fa:6e:00:d1:2c:13:be:e9:
         68:04:f3:58:0b:67:16:82:a4:77:fe:7c:22:26:b2:9b:07:6f:
         07:24:b7:90:80:a8:1f:67:8c:59:e0:97:c6:73:ef:05:48:64:
         b7:51:92:15:61:f2:e9:14:04:e3:20:dd:30:2c:68:1f:fa:9a:
         bf:0d:dc:09:f5:61:c3:9a:b3:1e:4a:cb:7d:8a:9e:5c:52:f0:
         c5:4b:07:fa:9d:e7:db:56:10:96:c3:94:b3:5c:49:45:14:09:
         75:bc:c4:4b:c4:07:6d:11:5c:d9:c6:67:c3:65:39:29:f2:60:
         38:9f:6e:91:6f:b3:01:6c:0f:17:6d:55:77:e2:9d:fd:be:cf:
         68:ce:43:ce:f9:fd:68:dc:52:19:5e:de:28:46:06:b1:51:ee:
         2c:0f:66:93:39:2f:44:d6:04:11:31:82:9d:3c:f4:e1:f8:21:
         c6:10:c6:74:38:6d:58:04:ee:d8:d1:73:8a:95:61:66:0c:e6:
         c3:8b:11:3b:46:92:8c:7b:65:65:00:68:57:1f:6f:21:c3:6d:
         10:b5:53:f7:da:b1:99:5d:d1:45:c0:1d:f5:ca:f7:89:28:3f:
         68:8b:42:8e:09:52:c7:86:c0:19:19:88:6e:83:5f:0b:ac:5d:
         25:91:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:04 2026 by rpki-client