Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acaf39f2-a766-3b8b-8837-103b030a5d6a.roa
File:                     acaf39f2-a766-3b8b-8837-103b030a5d6a.roa (raw, json)
Hash identifier:          BZCL8jbuT7rBqZBqTbVGE0AuzX/qwPzqXkmQEg9k4AA=
Subject key identifier:   43:99:DC:C1:6C:84:19:03:9E:CA:98:C1:47:69:0B:32:06:35:C5:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A5AEE87A6AE63FD56FA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acaf39f2-a766-3b8b-8837-103b030a5d6a.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396542
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:5a:ee:87:a6:ae:63:fd:56:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=f660c810-71df-4fd9-bec1-263727f4aa35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:36:8d:39:9b:37:3a:25:de:08:e9:25:b2:70:
                    76:13:21:7c:33:f9:17:ec:ac:48:5f:d7:13:91:16:
                    9b:1c:51:0d:78:e0:81:65:b2:98:86:07:35:b7:af:
                    36:1e:ec:74:5a:66:90:e8:85:aa:26:84:a2:b6:45:
                    6c:29:e3:1d:85:87:34:1a:4c:db:8d:4c:d0:3b:31:
                    90:e0:72:4a:eb:81:ff:de:c0:3c:4c:f9:f5:89:ba:
                    9a:b9:d1:e1:b6:43:c3:f3:28:06:63:ce:1e:05:ba:
                    60:28:1c:e7:5e:09:7d:a0:2b:41:69:ac:00:8b:97:
                    ea:2a:86:68:7f:3c:8c:d1:7e:5d:a7:19:e4:f9:97:
                    ec:8d:78:b3:30:ac:89:23:c1:40:79:00:3d:c8:30:
                    a4:4e:3c:35:c2:b3:30:d3:f4:c6:dc:0a:0a:e2:b3:
                    cc:67:c1:6e:d4:f5:a5:ec:9d:2f:db:76:ad:fa:57:
                    d6:b0:24:e6:6c:c9:c2:7d:da:44:dd:21:81:e9:79:
                    7c:01:b5:4d:35:37:a2:12:66:00:a3:19:67:00:fc:
                    c4:d9:28:7e:1b:df:d3:38:56:33:7c:f9:3b:b4:0a:
                    d9:89:25:e7:a3:d4:fb:79:b7:d5:71:4d:21:92:a2:
                    df:51:b2:42:2f:72:ad:6f:21:d8:a8:6b:14:ba:98:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:DC:C1:6C:84:19:03:9E:CA:98:C1:47:69:0B:32:06:35:C5:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acaf39f2-a766-3b8b-8837-103b030a5d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ea:7b:b2:05:59:31:0e:bc:13:d3:14:eb:70:5d:4d:31:7b:
         b8:93:ea:79:28:6a:04:b2:6e:52:1c:33:09:ca:32:99:f6:c4:
         ca:60:c8:9b:8c:88:85:3b:d1:ba:97:81:96:3a:eb:17:15:34:
         9f:b3:f4:bc:14:59:22:7e:1e:00:d3:84:73:e9:c3:02:db:5f:
         f9:39:b9:e7:3b:92:fb:61:ba:eb:5d:68:86:4d:10:e8:9f:0d:
         a1:70:1b:58:62:e2:d2:da:6f:e9:7a:32:31:b6:6a:4d:f3:8c:
         d9:b9:c3:56:2f:bd:c4:d4:dd:56:91:f0:d5:ba:8b:f3:a9:e2:
         bc:91:fc:b1:e7:02:87:1c:53:6a:8e:89:3d:91:32:42:4f:56:
         c6:e0:e3:df:fb:52:9a:69:31:98:10:1b:f6:ec:4f:14:93:8c:
         ce:37:14:19:d3:65:95:96:ff:0e:1b:8f:7b:67:e8:b8:68:82:
         9d:b6:b5:6a:70:b9:99:8f:c4:a3:ad:09:60:c1:59:e2:18:b4:
         3e:b5:36:f8:6f:75:83:ba:ac:4d:2f:79:e9:47:50:6d:18:ed:
         e3:99:bf:35:5c:1b:d4:f5:98:66:ac:1f:66:e0:51:8c:37:2e:
         07:e3:fb:75:55:e0:cb:2e:a4:ba:99:f4:f2:8c:f8:73:33:20:
         1d:f4:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:04:14 2026 by rpki-client