Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89ea88a5-8f3e-3748-8b45-266cbec452ca.roa
File:                     89ea88a5-8f3e-3748-8b45-266cbec452ca.roa (raw, json)
Hash identifier:          YLQ7JZITskZl6x2x1r0N8EQj8La6EkaKe6x5PK31kN4=
Subject key identifier:   2C:9D:6A:55:DF:F2:A6:54:DA:B8:A2:BD:6A:1E:AA:BA:77:D8:38:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9A7FE6BB6857716CF5E98880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89ea88a5-8f3e-3748-8b45-266cbec452ca.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     36621
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e6:bb:68:57:71:6c:f5:e9:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=a3df0610-9101-4693-94aa-70e9e3eb2255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:d6:be:f8:13:99:d2:1d:36:0b:c4:bc:47:
                    23:c5:30:23:ae:34:d0:8e:62:f4:3b:66:84:7d:06:
                    b8:4e:87:5d:9f:db:f6:9b:af:54:0f:0c:9e:b6:31:
                    ff:f4:2a:2f:22:68:a2:3a:60:17:35:9e:b2:b3:1b:
                    83:ab:10:2f:2b:94:bb:34:10:74:80:0f:3c:6d:d4:
                    1d:78:e7:e1:91:fc:65:07:f6:66:0c:e8:91:77:57:
                    49:5f:fd:01:6e:5c:ae:42:33:37:0a:5d:27:84:b4:
                    41:8d:96:a5:4e:24:31:a4:fb:eb:75:be:2d:6a:0d:
                    7a:52:bc:f5:fd:5b:4e:19:67:9e:ce:3c:09:d8:24:
                    b7:f0:c8:1b:e3:e3:3b:75:51:77:e0:c3:1f:2c:49:
                    a7:b3:0c:88:77:23:3b:18:5b:f5:cb:db:e1:aa:57:
                    e0:32:ef:69:91:65:bf:df:6d:0b:3c:20:33:4c:50:
                    f2:d6:0e:5e:36:8d:2e:a9:54:7b:e7:62:7a:60:ce:
                    82:41:3d:5e:0e:64:ba:00:ed:3b:2c:63:cf:7b:8a:
                    cb:a0:d8:76:22:c7:53:52:ef:12:48:aa:20:65:3c:
                    29:15:74:33:1d:3b:78:3c:62:dd:42:dc:4f:ba:1e:
                    2c:62:5f:08:71:4a:c9:74:be:09:7a:b7:e4:67:c9:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9D:6A:55:DF:F2:A6:54:DA:B8:A2:BD:6A:1E:AA:BA:77:D8:38:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89ea88a5-8f3e-3748-8b45-266cbec452ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:83:44:6e:03:5d:34:57:f5:86:d9:ef:55:46:58:ed:48:
         96:ad:fb:88:49:71:46:e1:c2:cc:75:42:e0:1f:96:7e:eb:38:
         00:71:9b:c2:6a:71:ad:92:5d:73:64:65:53:fa:c2:e1:ad:c3:
         40:d9:ce:f3:a4:1d:5c:30:10:54:1b:f1:ea:54:0a:43:01:b4:
         39:29:fe:c3:91:fb:7e:1b:98:25:e5:0e:ee:36:b7:56:c7:5e:
         fb:ee:cb:db:88:c3:4f:10:8a:dd:90:24:26:07:8f:9a:16:19:
         d8:a6:8b:3e:bb:be:1c:cc:66:51:ff:26:58:da:5b:7b:a9:cb:
         c2:68:8c:0b:cf:a0:3f:be:39:17:10:3c:d7:05:8b:47:39:c1:
         16:2a:1c:f9:66:b9:f9:46:a1:f7:c9:cc:2e:88:a0:d1:a1:9f:
         3d:4a:79:b0:a3:b6:b2:a3:70:bd:c4:eb:b2:b1:d7:ff:37:c5:
         1f:5d:2d:5f:14:ba:4e:90:50:4b:cf:5a:fe:6e:39:3e:da:d8:
         88:73:a3:16:85:fe:d2:e5:5b:f9:a8:42:67:64:e0:5e:5d:4e:
         5b:4c:b6:8a:9f:e7:80:56:b0:46:3c:8e:83:69:0f:b6:1f:c6:
         38:a5:05:60:2a:7e:01:04:26:30:7a:cc:db:99:9a:ab:5f:9a:
         ba:79:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:50 2026 by rpki-client