Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa
File:                     3282c4d4-cd82-30c9-9295-f17089c0d06e.roa (raw, json)
Hash identifier:          oXamD2nPo2Nb7rB4ny4844psdCvGM7SQNvjRD9MQE7Y=
Subject key identifier:   4E:0F:19:5D:11:8F:98:ED:56:9E:65:59:AF:B5:A3:1B:0F:57:32:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE52FC1E48DDCC2B178ED00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396543
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:2f:c1:e4:8d:dc:c2:b1:78:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=14702c49-3063-4afd-a6a3-ca13883ca5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:4d:b3:2e:5a:aa:81:37:b0:f1:e1:7e:66:
                    77:c4:23:bf:3c:81:c6:38:46:81:d1:5d:64:46:bb:
                    60:43:c9:e9:5f:3f:b1:f8:c5:91:1e:73:a4:63:45:
                    d0:80:89:c6:b6:cf:e5:f7:b0:d2:d1:db:15:fd:17:
                    ab:ae:ba:9e:85:67:be:36:f5:f0:c3:56:cf:bc:8a:
                    58:9b:ab:5e:09:f2:1a:19:27:2c:f1:4c:4c:cc:2a:
                    9f:d7:06:1b:4d:22:16:e8:73:9a:38:27:aa:a8:43:
                    6b:91:2b:bf:d3:59:ca:63:16:ac:86:2e:2e:b7:7c:
                    2e:3a:c5:41:44:ce:ee:25:04:6f:da:71:27:e7:21:
                    10:08:a4:e1:ae:72:93:6a:75:8d:fb:8b:72:d1:c5:
                    a6:9f:70:69:d2:d6:8d:2f:8a:0c:84:91:54:cd:87:
                    4d:b2:53:e9:52:5d:3e:97:7f:c6:e0:a7:f0:5a:7f:
                    e1:44:75:1c:1a:8d:55:d2:9c:9b:e0:76:cb:16:89:
                    cd:35:ec:05:46:b8:06:8f:06:dd:db:a5:bc:6f:e2:
                    3a:75:f3:c5:8b:51:87:93:7f:54:03:4a:26:c8:20:
                    59:73:3e:ca:22:bc:2a:ea:a7:2c:90:ff:e9:f3:65:
                    46:f4:01:50:32:e0:72:b4:24:1e:31:82:f0:da:82:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:19:5D:11:8F:98:ED:56:9E:65:59:AF:B5:A3:1B:0F:57:32:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:be:1d:b6:df:e8:06:49:9c:f3:91:24:76:33:89:7e:00:7e:
         a2:bf:7f:78:b4:94:40:8f:ec:a9:d3:6a:97:a0:fd:ad:0f:00:
         3e:4f:06:3f:fd:ea:44:fc:c4:a2:71:86:86:60:81:95:cc:eb:
         95:a6:61:70:e4:2c:21:f3:8c:cf:fc:c7:73:a2:d3:76:a5:a3:
         51:d2:04:5c:2b:c0:e6:db:58:27:bc:85:fd:60:58:ca:52:ee:
         f0:b6:da:87:cd:70:cc:5f:67:af:04:14:68:a3:f2:01:02:48:
         93:6b:b2:f3:27:97:53:cb:e7:95:f3:49:32:10:61:bd:1a:c4:
         b0:f1:0d:33:2e:9a:a1:6e:d7:2d:9b:d6:eb:41:2b:c4:fb:4c:
         f2:25:e9:ee:24:cb:06:e0:8f:fd:22:c5:df:cf:92:41:b3:ba:
         10:f6:6a:56:56:12:e9:2f:02:c6:40:d8:b7:1f:f2:88:b6:62:
         5f:2c:b9:98:89:06:4d:db:57:48:62:06:87:ad:6f:9a:d2:4b:
         43:86:48:77:b5:1e:f1:2f:bc:ad:a8:30:94:d1:34:31:4c:d8:
         14:6d:d5:cf:a6:68:55:c8:ce:39:08:35:02:d5:65:f0:b9:10:
         6f:6b:a1:05:df:f8:35:ef:4d:2e:f5:e9:2a:e4:cb:56:74:f5:
         27:11:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 04:22:19 2026 by rpki-client