Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4093df5-5439-3a09-a677-9be10aa7a81a.roa
File:                     e4093df5-5439-3a09-a677-9be10aa7a81a.roa (raw, json)
Hash identifier:          tj/3x8pAA3WYn6D0xRM0UANMjBKCF8OBcT7iRHaUDL4=
Subject key identifier:   E3:68:AA:95:5B:76:DD:08:57:FF:C8:B7:DC:07:4F:20:B2:82:D7:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64FC134B8ADFE77F4FDCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4093df5-5439-3a09-a677-9be10aa7a81a.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396551
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:fc:13:4b:8a:df:e7:7f:4f:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=584bf543-4864-4fc2-b1fa-84c2527f57f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:5f:46:1c:f9:65:ca:26:72:5a:0d:96:e5:
                    83:b1:89:7a:49:b0:7b:af:97:62:bf:41:38:20:7e:
                    76:d1:45:84:d1:7a:d9:dc:80:31:bb:19:53:60:60:
                    19:20:3b:6b:e7:6b:d3:7a:59:f8:c7:cf:1f:77:45:
                    07:9c:72:bb:81:12:c2:98:34:12:5d:20:e7:d9:34:
                    ef:ba:ff:6a:1b:2c:19:fb:c2:1f:a5:6d:0b:ed:98:
                    fb:f0:ea:5d:41:96:f8:bd:5f:44:d1:83:b3:c3:62:
                    c5:6d:17:23:84:d5:15:68:86:64:3d:ad:22:0e:4c:
                    81:dd:d3:f4:0c:42:9c:69:cc:06:50:4b:33:c3:b8:
                    db:46:c2:e7:bb:9e:90:b9:ed:d0:7b:ae:2f:e1:be:
                    d8:05:90:cc:da:c9:95:28:58:35:51:f5:53:e6:e5:
                    19:92:8a:89:9d:29:b1:ea:65:48:89:4f:09:e1:49:
                    4d:03:f4:aa:d2:05:4e:3b:9c:59:ce:86:9e:95:de:
                    c2:51:b2:ac:1d:96:51:7b:8d:46:6b:79:1b:42:f2:
                    53:6c:31:92:09:cd:b6:47:41:5e:14:74:ec:50:db:
                    44:c4:9c:1c:79:98:63:b8:dd:14:92:c4:13:17:7b:
                    7b:00:69:73:ca:8d:44:09:1d:ba:02:60:7a:50:6d:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:68:AA:95:5B:76:DD:08:57:FF:C8:B7:DC:07:4F:20:B2:82:D7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4093df5-5439-3a09-a677-9be10aa7a81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:49:c8:5c:b9:5b:e1:38:64:83:65:11:27:0b:a6:5f:c2:8e:
         ae:21:15:b8:e7:41:9a:43:1f:65:19:54:d9:e1:b1:6a:2c:1e:
         1a:97:71:e4:b8:3f:32:20:bc:1b:e5:e5:31:3b:a1:f2:7b:05:
         c0:58:47:e3:8f:11:5c:d0:0a:68:3e:cd:8b:53:d7:a1:a3:db:
         05:58:8d:a8:38:82:07:7c:2e:44:44:51:49:8e:1a:51:6c:d5:
         e7:e2:96:e3:a7:59:f7:b1:04:f9:3b:ce:bc:58:48:2f:0c:2e:
         23:fa:f3:1c:8d:9d:77:68:1f:ce:d8:9b:9a:8e:82:c8:c8:82:
         68:19:6e:25:0a:8b:b7:a8:85:1c:52:59:96:dc:ad:17:0a:17:
         2b:1c:cd:fa:26:1a:93:e6:40:c5:bd:27:c6:8e:7b:1c:5c:0b:
         da:3b:f6:f8:6d:f9:18:2e:9f:c7:be:11:22:58:ec:09:7b:cb:
         df:d3:c7:7e:b1:b1:bc:65:bc:4a:9b:d2:e9:11:81:2b:be:28:
         9e:06:80:c2:69:bc:54:b1:6d:57:d2:ca:a7:35:41:5b:20:8c:
         ef:be:62:3a:1e:7c:e7:99:02:2b:33:ac:9d:fb:73:72:b9:22:
         32:cb:a8:46:a2:9d:79:62:e3:8f:2c:c0:c9:89:a6:33:5e:fe:
         9a:bd:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:34:58 2026 by rpki-client