Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af834ca-64d1-3d15-898b-7f51e197de29.roa
File:                     9af834ca-64d1-3d15-898b-7f51e197de29.roa (raw, json)
Hash identifier:          4QbDGyVKxVGwVaao4A3tYzEwIYvO7LGWuclEJ57WUxw=
Subject key identifier:   C1:B6:C8:2B:9F:82:57:16:57:C1:61:BA:CD:E5:72:A7:3C:A1:43:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A5A1E5C134B792F6E7300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af834ca-64d1-3d15-898b-7f51e197de29.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     36622
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:5a:1e:5c:13:4b:79:2f:6e:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=f41afe59-7fd4-48d7-97c1-06455d49bd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:2f:b5:7d:6a:f4:e5:80:02:b0:e9:a7:25:
                    30:72:cb:26:6c:9e:62:7d:06:98:8e:38:e6:04:f3:
                    94:46:90:e0:b6:c6:a5:09:35:bd:6c:ca:c0:78:b0:
                    19:46:54:4a:01:dd:da:8d:66:f5:95:24:ae:69:06:
                    de:b2:a1:99:24:6d:e7:21:ed:21:d8:d5:d1:c1:6d:
                    42:81:bc:3b:c7:a9:8c:e6:14:1e:ae:f5:3d:4e:5c:
                    2d:2b:7d:cf:2e:ea:55:32:e6:f3:02:b9:52:6d:ef:
                    41:7d:ef:b6:de:9c:3b:af:ef:fb:34:3c:31:6e:df:
                    56:2e:64:61:5a:c5:1a:a9:33:83:2d:2a:6b:07:9f:
                    a5:8e:1c:f3:cf:ec:3c:6b:ef:e0:33:04:a0:f6:fd:
                    f1:cd:1d:8a:36:65:f9:8a:84:31:95:bd:49:78:55:
                    18:fc:fe:58:3c:fe:6f:dc:00:6e:4c:f0:f5:b7:ba:
                    96:a2:4c:22:5e:4d:7d:3e:04:71:04:bc:b3:c7:a2:
                    53:13:80:e1:9b:7b:16:fc:55:8b:9d:44:30:66:34:
                    4b:e3:9c:ee:2b:0b:47:cf:50:f1:17:8e:5d:b2:17:
                    52:76:45:a1:8c:36:14:e7:73:a6:8c:1d:15:4c:ba:
                    3c:5b:a4:02:5c:a6:5e:48:4d:aa:de:3f:8f:e5:e4:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B6:C8:2B:9F:82:57:16:57:C1:61:BA:CD:E5:72:A7:3C:A1:43:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af834ca-64d1-3d15-898b-7f51e197de29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:13:7b:4e:27:db:fc:28:0b:96:74:d3:4b:2a:9c:fa:7e:3e:
         fb:c8:98:af:ac:0e:83:ac:2b:45:b5:42:4b:91:62:2b:66:e1:
         dd:29:92:5d:3d:c3:62:50:b2:2e:7c:84:37:25:0a:71:d9:96:
         54:e9:2b:ce:47:cb:15:ad:8e:12:f5:82:38:1d:54:81:35:15:
         d2:39:16:c6:1b:08:76:d7:5d:57:d0:f0:ce:53:7a:6d:56:3c:
         a5:e7:87:b7:8b:b1:3c:88:58:85:52:b2:03:ab:05:72:31:5c:
         cd:8d:ee:64:ba:a8:d0:21:2e:55:cd:22:11:34:4f:9d:54:a2:
         0a:78:8c:d5:8b:a6:66:80:3f:f6:d1:13:97:fc:ae:0e:ac:9a:
         a9:64:b8:28:a1:cc:09:05:da:6e:29:d1:ad:db:d1:ac:4a:34:
         60:26:e8:77:1c:c8:06:e2:27:a3:99:1f:b1:1e:6e:54:c4:e2:
         1f:5c:2b:d3:1f:33:b4:2a:db:3d:41:32:5a:04:3a:54:a7:03:
         98:da:48:d8:07:0e:26:97:0f:0e:8d:89:8e:0a:15:55:d2:e2:
         e8:de:7a:fc:e5:59:3e:f8:a0:4c:28:4c:53:60:55:bb:20:fb:
         18:87:5a:3e:ca:f8:a9:27:87:2e:f2:d2:ad:c8:23:b0:84:f3:
         75:9b:b9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:05 2026 by rpki-client