Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c24aad09-ecad-3be1-92b5-1851495ad4ad.roa
File:                     c24aad09-ecad-3be1-92b5-1851495ad4ad.roa (raw, json)
Hash identifier:          1u7QMM51OzPk6hSDQu+jDLykKVOyEad8udX0al2h3DM=
Subject key identifier:   C3:B5:FD:87:35:37:23:DB:EC:D8:8D:C9:94:68:91:4B:35:4A:FD:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8DEFB6087CB45BC3A7089680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c24aad09-ecad-3be1-92b5-1851495ad4ad.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     40717
IP address blocks:        2001:503:83eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:b6:08:7c:b4:5b:c3:a7:08:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=58262d00-102d-472e-b0a4-f50c6d352f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:da:ac:0a:97:97:1e:cb:9f:c5:bf:9b:ce:
                    f2:74:e0:99:a2:d1:82:92:c1:0e:ba:22:73:1e:37:
                    fb:85:01:f3:cb:67:e7:c2:0c:4b:c2:6a:a2:aa:18:
                    22:56:08:1e:72:ce:45:c3:12:b8:70:70:68:ad:50:
                    e9:1a:87:a1:7e:ba:15:6e:02:d9:76:63:75:51:35:
                    70:f3:4d:bb:3c:e3:48:77:16:5e:4a:35:c4:af:c7:
                    8f:cd:fa:e5:1b:59:44:b8:d4:cf:21:33:11:7a:cc:
                    70:a8:b6:c2:ab:da:88:f7:27:b7:12:49:97:c6:47:
                    f4:10:6e:e8:3f:86:9e:98:f0:f8:03:d3:ad:62:a2:
                    76:4c:c8:2c:b9:18:5d:65:70:ef:65:2f:68:22:ab:
                    db:73:09:e7:5a:cb:87:a6:ba:f1:47:e9:70:fe:70:
                    b5:18:56:21:47:13:da:68:c1:15:c5:0c:a9:02:65:
                    14:43:cc:1b:83:fa:5a:02:ca:d1:26:49:b2:35:c4:
                    50:67:3e:35:a2:c7:a6:39:19:b0:02:a7:a9:67:2c:
                    6b:4d:69:e0:c9:89:0c:dd:74:79:2b:1b:1c:83:18:
                    79:7c:1e:85:e1:89:d6:e0:48:a5:d9:d5:f9:57:cf:
                    95:cd:7d:db:77:98:7e:54:9e:25:de:a8:24:d8:fe:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:FD:87:35:37:23:DB:EC:D8:8D:C9:94:68:91:4B:35:4A:FD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c24aad09-ecad-3be1-92b5-1851495ad4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a8:61:81:39:bd:83:ea:41:76:fe:81:19:9a:d1:4c:1c:ea:
         96:39:40:81:e7:d0:82:e9:d3:2f:a0:4f:a6:30:6f:3b:67:2c:
         39:b0:44:00:af:b5:b2:5e:85:38:44:8f:d0:78:d5:ab:35:ba:
         e5:d6:4d:6b:91:f1:e6:e0:43:9f:b3:9b:93:83:2a:b4:d7:6f:
         8e:af:f9:6b:c7:1d:eb:d2:a2:71:36:ca:da:90:b7:33:2b:a4:
         d9:6b:9b:79:94:d3:11:3b:6a:13:25:1b:ad:c7:7f:b9:9c:91:
         3b:f5:6f:32:74:ef:09:f5:95:b4:9e:86:d4:11:f5:6c:85:30:
         46:1e:dc:7b:b0:31:7e:9f:00:f6:e9:0b:17:99:d1:0c:3c:61:
         49:40:cf:b6:44:bd:74:9e:13:31:6c:24:87:3a:74:72:b1:91:
         5b:a9:a0:c3:28:14:da:e9:ee:68:66:90:e4:ff:31:72:65:58:
         8c:ee:a1:54:d4:19:dc:31:53:f1:56:df:98:04:12:3c:8f:04:
         5f:7f:28:ee:e1:fa:f0:ce:9b:06:c7:1c:fd:4d:e1:1e:4f:f9:
         18:b3:c8:9b:b4:ae:2c:5d:29:48:48:98:9d:cc:97:d6:fa:ad:
         ec:ee:ea:69:8b:03:c6:93:2c:50:08:65:8c:3b:55:4e:77:5a:
         90:a5:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:34 2026 by rpki-client