Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d7027b-d507-31fd-abe7-a4f0f7df3779.roa
File:                     35d7027b-d507-31fd-abe7-a4f0f7df3779.roa (raw, json)
Hash identifier:          OY0/SZ+PEdkxvHRCTZUIAJan+03DSs7tvj9KYBsILJ4=
Subject key identifier:   8A:88:D9:EE:0B:9B:11:D0:33:1D:8B:1D:E2:28:E7:19:51:AD:D1:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE50DE49CFCB04E7EC99400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d7027b-d507-31fd-abe7-a4f0f7df3779.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     211369
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:0d:e4:9c:fc:b0:4e:7e:c9:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=c9fec791-4bae-49c1-b95e-8ebb5396318d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fb:f0:d7:2c:8a:4d:7c:e8:39:46:2d:e8:3d:
                    2c:5d:ad:b6:31:43:4c:ed:ee:8e:4e:2a:73:a1:f5:
                    b2:78:9a:15:3d:98:2d:e6:28:a9:e7:d7:48:29:49:
                    8e:f0:59:c9:0b:8a:6c:bc:b7:5e:2c:59:ba:ba:a6:
                    33:d3:d0:79:cb:c9:f0:3e:5c:f3:3e:88:2c:c6:9f:
                    ee:37:50:a2:c7:8b:87:ff:c8:3c:89:13:51:56:7f:
                    33:fb:cd:e1:48:07:25:3d:c1:a0:52:24:db:77:3d:
                    fa:6f:20:fd:b5:8a:1e:38:32:95:f1:6e:fc:2f:9c:
                    13:1a:df:20:f0:9b:f8:0f:52:1c:75:34:ce:6a:47:
                    b0:26:c9:62:fa:cb:0a:6c:17:3f:06:d6:fe:65:f8:
                    df:7e:aa:5d:b5:37:53:06:8c:1a:d2:89:bb:fb:2e:
                    06:ac:90:6f:a1:62:15:2f:b0:8c:d6:85:6a:2c:c7:
                    69:be:5d:f4:c1:0f:47:90:ea:33:2c:90:b8:5a:ae:
                    9f:7e:4b:2c:9b:2c:97:8b:32:a0:02:89:73:b6:2b:
                    6d:bf:37:92:22:90:24:55:30:d8:6c:c1:25:b3:e3:
                    78:f3:1e:74:50:35:fa:07:90:de:dc:38:a1:3a:ab:
                    f0:d7:ef:49:0a:9e:b0:b9:6d:af:b2:fe:41:5c:ea:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:88:D9:EE:0B:9B:11:D0:33:1D:8B:1D:E2:28:E7:19:51:AD:D1:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d7027b-d507-31fd-abe7-a4f0f7df3779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:91:25:c5:45:62:50:38:38:27:7d:28:b0:d6:d8:e0:ff:bd:
         3c:c2:7e:98:cf:ec:3b:13:ff:e0:51:4c:c0:45:98:7b:16:74:
         c6:f7:f4:e3:35:45:58:fa:cd:7e:e5:6f:ce:07:d2:88:04:ab:
         7c:ef:ad:fb:e4:27:31:3b:90:18:cc:3d:0a:9c:81:52:1f:32:
         5b:70:b5:15:38:98:bd:9e:46:b9:e2:68:d0:f6:92:4c:79:ea:
         4e:87:8f:40:42:ab:7e:89:c0:70:27:88:eb:a0:97:79:f1:9d:
         83:34:b6:49:fd:1d:81:b4:41:3e:cc:58:d8:56:db:e1:06:d8:
         a8:43:13:b3:66:aa:75:ae:50:25:cc:2d:6a:3b:88:0e:5f:5c:
         76:bb:05:d7:55:ff:87:1f:1d:be:c4:97:4e:04:33:43:54:97:
         eb:31:a7:6e:e2:70:4d:7d:7e:52:be:3e:04:4f:ff:09:f4:50:
         d7:cb:a4:4e:9c:bd:16:d5:10:ee:7d:65:0c:a8:31:fa:21:71:
         b8:9d:ab:d3:50:76:f9:5c:e2:64:de:e3:9f:dd:52:15:78:8b:
         68:1c:13:0d:2f:a4:b1:0b:29:cb:3f:7a:2a:43:ae:a8:ce:f6:
         ae:be:97:88:16:9e:51:01:09:2e:1a:06:54:7a:25:b1:0e:71:
         72:dc:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:21:34 2026 by rpki-client