Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4e6b330-f6d7-39d7-aca6-5affcd7ff980.roa
File:                     b4e6b330-f6d7-39d7-aca6-5affcd7ff980.roa (raw, json)
Hash identifier:          p0iO6M8+kDHv3yUMg2sgR2vJgfY98+75zEbIV1Rvc80=
Subject key identifier:   82:4D:B4:6F:04:21:5B:AC:E5:D7:C3:C6:D3:40:46:16:B5:C8:EF:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B250F71A86E1DB0A9CCBF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4e6b330-f6d7-39d7-aca6-5affcd7ff980.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     396544
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:0f:71:a8:6e:1d:b0:a9:cc:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=276a2620-90e1-4c99-822f-80d9a78b987f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:e2:da:23:b1:64:6d:70:0d:0e:5a:82:87:
                    6c:25:4c:e7:df:3b:a8:dc:ca:9c:7f:fd:4f:16:d8:
                    44:4d:83:f6:3a:dc:18:79:f5:50:86:a1:88:b6:4b:
                    49:47:a9:30:ec:1b:62:93:84:a6:b0:f4:0b:8b:f4:
                    52:5a:3b:b0:3d:b3:6f:2b:f4:95:37:71:bd:73:16:
                    af:85:fb:e2:af:08:d2:62:6e:20:98:9a:da:ab:60:
                    8d:3f:36:85:75:cb:c7:26:9e:d9:cf:c9:3f:48:49:
                    b4:a1:0b:bf:51:2b:73:c1:b8:0b:7d:e9:c4:9a:f4:
                    28:38:d1:1f:87:fb:7d:9e:dd:f6:b3:43:13:91:b8:
                    63:56:23:7c:6a:8f:77:25:fd:06:87:d1:39:28:93:
                    a8:ce:44:fd:ac:f3:c9:c6:7c:9c:96:d3:cb:bd:20:
                    2a:01:14:e4:a3:77:96:d1:20:5c:67:b2:6e:33:e6:
                    f5:3b:cc:72:5f:c1:dc:69:b1:d7:55:6d:ab:c0:ae:
                    2d:b8:ec:71:62:c4:02:87:21:59:30:6a:18:97:81:
                    e5:77:28:5d:dc:51:cb:35:16:1c:fb:e0:b4:1d:21:
                    a4:8e:70:79:4e:f2:76:7e:58:23:9d:1a:94:ac:53:
                    fc:b0:c6:32:ac:e0:49:97:5c:e0:b5:dd:08:84:d3:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4D:B4:6F:04:21:5B:AC:E5:D7:C3:C6:D3:40:46:16:B5:C8:EF:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4e6b330-f6d7-39d7-aca6-5affcd7ff980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:72:ea:bb:67:28:e5:0e:ef:7d:96:fe:05:ea:b9:a9:ff:b2:
         9e:8b:34:c9:5b:e9:58:3b:5c:c5:96:d9:7f:d8:d0:fe:c6:ca:
         67:af:e9:52:65:30:13:37:9a:4c:88:6a:7e:a5:fb:96:23:5d:
         6a:c2:a2:4b:49:6a:e8:ca:64:4a:8e:9d:13:a7:9d:93:c1:2a:
         b4:d2:84:b3:74:5b:32:1b:31:c5:42:e8:94:6a:f1:56:14:ec:
         d3:83:ff:01:13:78:09:1c:25:ca:ff:3a:b4:ca:ac:9f:ca:ab:
         5e:92:07:f3:1f:be:04:f0:da:a0:e4:67:b5:b0:d2:1d:d9:92:
         1d:99:db:f3:e8:89:22:98:72:29:bf:81:3f:78:32:7c:4d:f2:
         0b:5e:0b:c8:7c:da:19:e8:27:fc:d7:38:2a:a1:bb:14:91:2d:
         e7:42:87:49:10:e6:b9:06:c4:f0:87:56:ce:52:35:3d:32:91:
         a1:18:62:9f:71:8d:41:c6:ae:28:47:c2:0a:f4:d7:04:1a:cc:
         ed:84:84:12:24:9c:f9:bf:98:2e:2b:bd:30:f3:31:8f:e1:92:
         c8:88:e4:7b:4b:a2:ca:ee:44:2e:ec:f8:4e:b4:4b:79:e3:29:
         bb:f9:42:95:e4:6a:c0:aa:7c:52:4f:46:0d:15:39:c3:79:74:
         74:fa:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:05:13 2026 by rpki-client