Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e230cee9-c290-3d1f-bd86-82311bc1f5b0.roa
File:                     e230cee9-c290-3d1f-bd86-82311bc1f5b0.roa (raw, json)
Hash identifier:          rCAFaKZipQqPk1C37K5cIWyNPtmjtSNQ7Yzk8J51HGE=
Subject key identifier:   EE:75:BC:F5:14:CD:E9:31:48:06:87:1C:F3:CE:27:2E:68:72:54:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A6505D31D2C8497D93390E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e230cee9-c290-3d1f-bd86-82311bc1f5b0.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     397205
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:65:05:d3:1d:2c:84:97:d9:33:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=0d04db9f-0efd-4369-a99a-9ac74c1675dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:46:86:0e:c1:40:fc:74:d1:25:e5:76:e9:
                    5d:69:03:7f:00:c1:a9:b9:6f:41:30:23:a3:8b:62:
                    6f:50:dc:97:6b:fd:3d:bb:66:7b:40:e1:61:3c:c4:
                    2d:f9:9b:36:62:00:f8:2b:ea:fb:30:1f:59:63:6f:
                    9b:03:49:71:2c:35:71:98:ac:ef:ec:fc:50:20:00:
                    a5:4d:f2:14:64:af:5b:5e:ab:be:b3:6b:9a:2d:79:
                    b8:05:af:e1:59:6b:cd:e2:97:b0:b5:a6:bd:d8:d7:
                    74:ff:70:9b:de:6a:32:e6:87:80:15:eb:bc:e4:19:
                    78:17:4c:1b:bd:be:23:a1:57:9f:5a:fa:56:78:83:
                    e0:e3:c5:18:f7:18:90:3f:54:97:b9:be:0c:f6:d9:
                    f3:13:da:f6:e5:de:50:56:a7:1b:e0:69:9f:4c:9d:
                    cd:0f:47:63:21:6d:f7:eb:7f:05:cf:df:e0:4e:e1:
                    d2:8f:ae:6a:ea:eb:aa:ff:38:e7:46:3c:43:2d:76:
                    f5:04:aa:eb:b3:91:e2:c3:2d:42:68:ac:80:ce:62:
                    32:b3:48:01:97:ec:7c:fb:df:a4:62:6f:70:5c:e2:
                    bb:dd:ba:ec:fc:b0:5c:34:bc:3f:24:3f:9d:9b:c1:
                    48:37:9a:ea:df:ae:64:e3:60:3a:8d:52:71:f3:66:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:BC:F5:14:CD:E9:31:48:06:87:1C:F3:CE:27:2E:68:72:54:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e230cee9-c290-3d1f-bd86-82311bc1f5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:70:37:34:49:4c:54:00:74:33:6a:de:6a:af:38:d9:23:
         0a:f6:94:58:6a:bb:b6:ee:51:77:c2:49:0c:95:c8:1b:2b:e0:
         1a:86:a8:15:59:de:32:c8:b2:e9:59:f2:7f:8d:e2:b0:d7:60:
         d5:ab:13:94:44:58:18:4a:40:13:ac:aa:33:4b:78:fa:ff:25:
         f6:83:ba:96:53:ac:c1:03:00:a7:37:db:79:56:6d:03:7e:82:
         de:b2:86:a7:b2:64:0e:19:56:cb:f4:32:7f:8a:c3:ed:98:48:
         79:b9:66:75:dc:8b:54:10:5f:e5:80:75:dd:c9:43:6d:13:43:
         e7:1a:86:9b:26:fd:e7:34:51:e2:c7:8d:56:63:6c:b7:e4:8e:
         d5:44:0d:ae:48:7a:0b:f8:af:93:11:9e:9f:9b:37:65:62:44:
         5a:ce:ec:0c:9f:b4:88:ba:7b:c3:9d:74:9b:75:33:b3:db:6c:
         08:bd:29:03:60:52:29:97:a9:13:a9:ad:50:dc:cd:12:d7:ea:
         c6:1d:d5:8c:c4:11:e3:85:fe:c1:76:9a:55:5f:6e:14:74:d1:
         ff:6f:07:a2:81:2f:88:52:8e:95:60:95:d1:da:6e:8f:5c:7c:
         ae:29:cc:90:5f:e3:63:00:b9:d7:32:ef:1c:66:12:bf:e8:b8:
         2a:53:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:37 2026 by rpki-client