Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca0ed1d-2677-32e4-87f2-bb0e29d278ce.roa
File:                     dca0ed1d-2677-32e4-87f2-bb0e29d278ce.roa (raw, json)
Hash identifier:          kYCiKl6KQ/U3/nelscn/ybV2V/1bmNyIy+t+bzZTppA=
Subject key identifier:   2D:63:D2:EE:25:5A:07:5E:2E:BA:C8:71:B1:77:65:10:19:CD:44:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64FC2D509B835F61764A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca0ed1d-2677-32e4-87f2-bb0e29d278ce.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     36625
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:fc:2d:50:9b:83:5f:61:76:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=41bcd138-54b8-43e1-b8a7-c507fa35144c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:f5:a9:6a:e1:d9:3f:37:91:68:9a:a8:54:
                    ac:03:67:1b:a6:df:4b:17:67:a8:de:57:c9:b3:e9:
                    fe:c4:ba:56:dd:8c:d1:5e:67:4b:53:95:ca:ce:b9:
                    be:5a:20:35:3f:ea:aa:e1:6d:43:ef:f6:1f:55:0c:
                    db:ed:28:de:86:6c:fc:ef:6a:ea:4d:14:c9:ad:15:
                    c2:dc:3f:bf:e5:ec:7b:21:0b:15:5f:ae:5f:d6:c3:
                    14:da:79:30:e3:d6:fe:e7:8f:b7:f8:84:cb:13:65:
                    fc:34:e3:96:df:18:e8:1e:8d:b1:a0:1b:96:a3:8d:
                    78:94:1f:69:c0:e2:ae:3e:f2:f1:40:22:a4:83:51:
                    e3:51:d4:00:00:b4:25:df:8e:fe:d2:df:90:fe:35:
                    ab:ce:98:cd:d7:db:cf:17:ba:9c:9a:9f:cd:5d:5b:
                    8a:26:d9:b4:6c:96:62:68:e3:bc:d3:7f:6a:a8:b2:
                    b7:c2:68:5c:d7:4a:31:33:47:02:1b:9f:28:40:f5:
                    c0:f3:fc:31:a8:c6:aa:3b:60:07:37:44:bb:8a:08:
                    ed:a3:9d:f0:6f:c5:8f:01:53:93:66:a9:a8:ee:61:
                    14:66:5a:5b:b6:aa:df:c7:fa:ec:cd:41:37:7a:d5:
                    e7:6b:e7:f5:a2:a6:aa:4c:1b:8c:71:91:67:3c:db:
                    7e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:D2:EE:25:5A:07:5E:2E:BA:C8:71:B1:77:65:10:19:CD:44:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca0ed1d-2677-32e4-87f2-bb0e29d278ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:74:10:17:43:86:92:c7:35:65:5b:7e:ef:f0:f6:61:7d:
         bf:b4:e3:4c:83:07:ac:c8:b2:6c:60:b8:55:3e:25:8d:55:5c:
         3f:5c:a3:dd:15:9b:61:4e:5a:38:a6:ba:bd:52:aa:95:0a:35:
         cc:b0:c3:26:68:10:b0:6f:49:9b:aa:17:99:d6:54:d6:f4:d1:
         cb:81:29:d4:d2:d2:fd:63:8c:65:82:7c:7a:7f:4c:e7:b8:99:
         ae:03:47:62:3b:31:83:f9:bf:7b:b0:17:b5:6b:c2:f2:f8:8a:
         83:25:30:ca:82:07:b8:8c:ed:23:92:bc:d7:4c:de:a2:ed:36:
         fb:6b:b5:e7:9c:60:3d:94:f1:66:45:37:e9:b0:a0:1e:a9:63:
         de:3b:6a:ca:36:98:9c:d4:f0:8a:d3:48:d9:22:df:78:46:3b:
         50:86:30:c3:85:45:14:c6:33:29:8f:76:82:09:02:fc:f7:72:
         fd:4a:cf:31:17:9c:f8:72:dd:0f:a0:7c:66:21:77:23:9c:53:
         6f:f2:f4:24:c8:d5:2f:d3:ca:fe:cf:bc:99:4a:76:58:54:4b:
         60:ad:88:b9:63:4b:6f:56:e9:75:2a:b6:e9:9c:9b:80:e3:ba:
         bc:18:0d:13:fe:e8:cf:b5:be:f5:5a:6e:93:d7:b9:97:8e:de:
         3c:f3:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:52 2026 by rpki-client