Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54e4485-008e-3ae9-a689-c6a08e3980fa.roa
File:                     a54e4485-008e-3ae9-a689-c6a08e3980fa.roa (raw, json)
Hash identifier:          hg9CcI8uqpeHD8+kn5F3GgXLouKYpDOAury817ycz00=
Subject key identifier:   71:E0:BA:B7:F2:98:E6:5F:E7:0A:37:12:A9:54:07:DD:6D:6C:CB:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64FB4667FF069B3DD74080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54e4485-008e-3ae9-a689-c6a08e3980fa.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396567
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:fb:46:67:ff:06:9b:3d:d7:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=5204c3ae-d07a-48ff-aab3-2d0606f8f9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:47:2e:09:95:c8:28:1e:0b:f5:f3:c0:ca:
                    6d:84:eb:82:19:32:c6:9e:37:ce:a3:21:89:33:49:
                    7a:78:96:14:b3:6c:ae:49:d3:36:a6:c9:a0:e3:0e:
                    5e:d3:1b:32:4e:8a:65:be:db:df:36:8b:9f:8d:33:
                    12:32:ce:6a:12:f0:26:5d:7f:64:27:af:40:5a:59:
                    9c:04:dc:e7:37:b4:72:b7:e9:7d:db:39:2f:f9:d4:
                    eb:bf:e2:f9:b0:dc:33:dc:59:1f:b3:7b:94:98:74:
                    56:95:84:2b:44:43:8c:9a:59:1c:7e:d8:2d:e6:8c:
                    b8:c3:36:1c:d0:08:ae:15:bd:8c:3c:42:93:f8:34:
                    8c:00:03:b0:67:35:23:ed:7f:ae:33:c4:89:30:74:
                    e2:d3:83:82:40:ec:d1:9e:f7:bc:59:ba:08:71:2a:
                    9e:c2:6f:9b:4b:c4:88:01:0a:78:8b:05:c3:e5:2a:
                    ea:a2:2b:cc:85:42:de:69:9b:e0:0e:48:b0:34:d6:
                    07:7d:93:06:d8:ad:87:13:30:7b:97:32:e1:a8:33:
                    b7:4f:74:a2:31:93:56:be:5c:10:06:a4:00:5a:1d:
                    3b:1d:5e:08:09:3c:c4:d9:17:83:b1:c2:1f:8f:4c:
                    45:f0:33:69:b9:e8:88:2d:ee:c8:24:1e:e1:ec:08:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E0:BA:B7:F2:98:E6:5F:E7:0A:37:12:A9:54:07:DD:6D:6C:CB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54e4485-008e-3ae9-a689-c6a08e3980fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:db:85:54:ab:ca:45:ae:6a:33:5b:cc:c1:86:ef:42:79:
         cb:94:e2:a2:29:56:f1:39:b9:ea:2d:fa:c9:d5:7e:0c:99:b7:
         f1:51:fa:02:78:c9:2d:42:76:ca:1e:a8:a0:84:63:81:6d:0d:
         66:ff:14:c9:18:5f:0d:16:d2:f0:51:e5:ac:b2:56:c9:ac:63:
         31:cd:d5:ec:2b:97:3c:dd:8e:fb:57:ee:e8:fa:bd:03:8f:6b:
         fe:d3:ca:11:5a:80:fc:f2:74:84:f3:f3:4c:7a:0d:62:b0:d5:
         76:e3:c2:65:92:7f:94:f8:46:bd:ab:0e:ec:38:52:48:d6:a7:
         cc:cd:9d:c6:e6:c6:8d:d7:48:99:64:95:a4:8b:2d:08:8f:62:
         d1:4e:03:53:65:a3:71:9b:aa:3b:f5:9f:6a:e6:48:91:2f:76:
         f7:eb:e4:c5:62:5d:43:34:75:f3:bb:70:2e:5c:2b:06:c7:fd:
         04:dc:e2:23:50:4b:93:69:48:92:0d:25:be:a6:9c:3f:3c:a5:
         10:38:e1:19:99:5e:dc:ed:34:d8:cb:06:f7:ed:4d:92:b1:05:
         2c:d1:20:65:7c:27:1a:1a:d4:f5:bc:46:fe:c0:ac:4a:d5:d0:
         5b:b5:72:fc:d6:f5:3d:86:49:7b:0e:48:d4:d0:a6:ec:2d:f6:
         06:76:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:25 2026 by rpki-client