Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71a53292-5d1d-3351-8f6b-9f15eac5d216.roa
File:                     71a53292-5d1d-3351-8f6b-9f15eac5d216.roa (raw, json)
Hash identifier:          938SqPQunvQZ44p/hnGJSgAEeo/BlqwL1DLuIo0a+SM=
Subject key identifier:   82:82:FB:AF:51:2D:02:BF:CF:F4:22:11:91:25:90:8E:43:6E:3A:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7BCA246DB970E84296B89380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71a53292-5d1d-3351-8f6b-9f15eac5d216.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     396575
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:24:6d:b9:70:e8:42:96:b8:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=5e1f85c6-9231-449c-9d71-df7fcdb752a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:23:86:a4:7d:1d:e1:e3:29:d9:de:b6:ce:
                    9f:a9:a2:56:c8:9f:64:b5:41:d9:78:79:cc:6b:56:
                    06:d7:5f:7c:94:66:e7:2c:ef:e3:da:d4:44:10:7e:
                    6d:bd:60:7c:fe:fb:ec:03:a6:60:31:39:96:10:20:
                    5a:12:bf:2b:95:ee:bf:38:69:e6:4b:46:44:24:29:
                    79:93:30:94:ee:7b:8a:20:cb:30:ce:5f:7c:2a:17:
                    ad:3c:5f:3b:cd:ce:fc:42:f3:70:94:2d:37:97:7f:
                    31:dc:dc:a2:d2:74:ab:4a:8e:37:fe:6a:26:b4:c8:
                    8f:cf:49:d9:87:5d:6d:25:2f:a1:a7:d4:4e:c1:77:
                    b6:ab:f9:d2:81:66:5d:62:74:e9:12:fc:83:4e:57:
                    ef:f1:d7:96:8d:fe:ae:8c:20:a3:86:e6:53:4b:bd:
                    78:6c:71:17:a0:8e:ee:d6:77:19:d5:07:c9:c1:65:
                    9a:6b:7e:85:cf:d0:00:2a:97:76:9c:38:1a:9e:a9:
                    0b:13:34:60:7a:eb:0a:27:aa:a6:6c:7e:53:52:68:
                    60:bc:9e:04:cf:3f:a2:bc:68:e2:43:0e:3b:d7:56:
                    eb:b7:ad:d7:70:57:ec:47:a5:ea:c1:9f:a7:ef:9b:
                    66:7f:d4:6d:52:ad:84:69:e1:3f:3e:f6:85:f3:11:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:82:FB:AF:51:2D:02:BF:CF:F4:22:11:91:25:90:8E:43:6E:3A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71a53292-5d1d-3351-8f6b-9f15eac5d216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:02:e3:11:1b:d4:90:1a:e6:2d:88:7d:ec:83:2b:0f:56:f4:
         86:06:ff:f7:f0:f3:30:d2:42:45:cd:bd:e4:cc:63:b0:95:80:
         23:9c:10:47:e4:6d:b9:99:70:3c:8f:6e:c3:53:dc:b0:2b:dd:
         b0:44:b9:6c:cd:11:f7:e0:73:c4:85:be:c0:48:10:06:da:6e:
         c7:24:5a:45:42:36:f3:76:88:23:e1:c1:de:55:44:46:c2:bd:
         c8:d4:74:1c:74:35:04:73:89:45:e4:28:63:c9:f4:c7:72:29:
         5f:26:59:5f:51:72:04:19:3c:8f:23:e0:ce:a3:54:bc:ec:f4:
         c0:a8:02:93:b8:29:77:ae:39:ff:ef:b5:40:1d:56:6d:41:72:
         b6:2d:ac:a9:80:66:3a:be:b5:a8:9f:48:63:6f:31:da:e6:a9:
         0c:7f:44:1a:6e:6f:08:59:87:63:ef:b0:f7:03:c4:10:5f:59:
         86:cb:59:a6:c6:fe:e5:05:be:e5:2d:6d:a3:74:22:1b:ad:81:
         37:e8:1f:e6:8f:2c:25:5f:a8:f6:dd:7c:b4:c6:f3:df:c5:6e:
         29:6d:6f:ca:ed:9a:1e:9c:4f:be:bc:6c:fd:55:9b:5e:5b:c3:
         f3:5a:d0:a3:3f:09:31:2c:e8:54:0a:3b:3b:0a:1e:2d:c9:7f:
         98:68:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:52 2026 by rpki-client