Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/694a82f9-4ff0-32bf-81dc-598a15288c36.roa
File:                     694a82f9-4ff0-32bf-81dc-598a15288c36.roa (raw, json)
Hash identifier:          J/Mf0hJ3Y1mTmNz1h6+J3vgSzdmy1h2/5TR64BLWjPI=
Subject key identifier:   63:01:F3:72:90:E4:01:E5:E0:3B:02:5C:85:5E:43:9E:96:0E:43:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E779A271C7D5F9D8381F83000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/694a82f9-4ff0-32bf-81dc-598a15288c36.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     10515
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:27:1c:7d:5f:9d:83:81:f8:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=3608a011-3781-4cf9-a5b7-07bac592a742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cf:fe:ca:67:34:5d:7c:64:ce:af:99:12:81:
                    6b:ee:a0:17:af:2c:75:36:a9:76:b3:77:0e:82:3b:
                    c4:c4:fd:65:d8:b9:3c:a6:d8:c6:f2:c5:9f:b6:5a:
                    d0:dc:6e:f1:45:78:ac:8f:04:0a:cf:fa:b0:64:6b:
                    ae:75:7d:2b:f6:3b:ac:b6:f5:dc:f5:08:e0:f7:6e:
                    f0:37:11:8b:cf:0c:d3:22:63:95:45:78:82:f9:41:
                    8f:eb:01:8d:a0:ef:37:12:6f:0b:69:53:11:e3:00:
                    ce:0b:df:f4:6f:7c:bf:60:9c:34:a6:2e:a0:d0:59:
                    c0:4c:e8:78:a3:64:c5:52:94:e1:38:0d:4d:42:06:
                    ac:c9:6e:ab:29:95:22:4c:a4:86:88:8c:10:2e:ea:
                    dd:41:d1:b3:7c:6f:35:55:e1:c8:79:48:24:11:0b:
                    ff:e0:87:cb:78:67:06:c3:0b:b2:f4:df:8f:d5:6a:
                    60:18:a1:1b:f6:02:e5:82:4e:8c:5a:1e:bf:6f:b3:
                    66:d9:ca:17:72:69:24:aa:b7:bf:df:f8:1d:d4:76:
                    fb:0d:12:f5:3c:d2:0c:de:0d:86:ff:d9:f9:1f:05:
                    73:d9:60:67:7e:82:36:0a:09:1b:82:c6:55:8b:b1:
                    b6:ed:6f:0c:ae:3c:22:e8:3d:99:dd:df:1a:0f:05:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:F3:72:90:E4:01:E5:E0:3B:02:5C:85:5E:43:9E:96:0E:43:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/694a82f9-4ff0-32bf-81dc-598a15288c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:fd:79:6e:ae:1a:04:c1:7b:82:ec:d3:40:3a:e1:99:b8:
         b5:27:1b:57:11:35:20:7d:cb:9b:ea:c6:0e:82:dc:cf:ff:ed:
         03:51:11:ec:d1:21:b0:42:c9:32:30:ad:00:35:bc:22:37:aa:
         08:29:35:3a:04:0f:24:61:f6:fc:97:ad:06:26:31:d0:1a:e1:
         11:83:c8:fa:5c:5c:a5:f4:6a:41:78:d8:73:f1:c2:83:f7:99:
         53:b2:25:6c:cd:b7:c0:f9:af:f9:4d:b6:39:79:eb:98:ff:ba:
         f5:e7:39:43:69:1c:ef:c5:d1:e6:80:53:55:c8:02:5a:8d:a9:
         47:08:8c:3d:15:3b:4f:d9:cc:63:43:c9:03:be:08:72:32:fc:
         47:17:3d:77:19:e6:09:5a:d3:26:dd:6d:75:63:07:07:90:51:
         f1:76:b8:ec:d0:dd:95:61:15:b3:74:5a:6d:05:51:9c:eb:d6:
         a7:97:0c:9b:46:8d:36:ee:eb:19:06:da:90:ed:0c:c1:27:ed:
         b4:0e:1f:cf:45:20:89:8a:5a:2f:52:a8:f1:81:87:8f:e8:bf:
         67:d4:26:97:03:36:f5:c6:fe:e3:f2:38:86:0a:27:60:d1:76:
         52:52:1b:c3:79:47:16:b3:5c:ca:3b:ba:5c:f5:61:52:20:d3:
         f9:72:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:15:52 2026 by rpki-client