Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/458d5f6c-2d9b-3d48-8acf-cc61421f341b.roa
File:                     458d5f6c-2d9b-3d48-8acf-cc61421f341b.roa (raw, json)
Hash identifier:          G830SknVPrd+Qma3mFKB9CKARC0Yw8SgYeSKBcM/WJw=
Subject key identifier:   58:41:27:F3:03:98:28:9D:49:B1:61:F6:15:40:F9:C0:53:32:AD:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA796DF105B3195A881115DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/458d5f6c-2d9b-3d48-8acf-cc61421f341b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396590
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:df:10:5b:31:95:a8:81:11:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1744b089-853c-443f-8312-8a35ac05c9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:b0:4d:f6:b5:48:7d:83:7e:ef:4f:8b:b3:
                    65:83:8e:85:12:3e:44:60:a1:42:f3:87:30:c7:9f:
                    8d:57:e0:e9:8c:28:0e:9f:ab:e6:3c:06:f1:d8:f1:
                    5c:ec:0d:51:8d:91:5b:25:dc:f8:1e:d4:bb:91:2b:
                    bf:f8:fe:8d:54:44:a5:6c:19:42:89:d3:16:de:4d:
                    37:40:df:a2:d0:58:f5:69:67:40:22:96:37:61:05:
                    df:d6:b6:ae:9d:b8:0a:dc:90:db:b0:46:08:27:86:
                    c6:9c:67:33:34:26:63:43:10:d6:a1:37:5c:26:d2:
                    71:16:2b:6e:c4:b6:53:72:b4:3a:cf:d0:30:36:23:
                    84:1c:59:f0:ad:36:0f:47:88:54:07:f2:3c:ab:4b:
                    e3:cb:30:81:55:40:07:b5:b5:dd:a5:1a:d7:03:cc:
                    4f:b7:6a:0d:8f:b5:01:c9:9b:e0:09:cd:3d:99:b5:
                    84:85:81:11:52:bd:cd:26:71:12:e5:67:f0:7b:1b:
                    8f:e5:50:af:44:5f:f9:03:5a:98:b8:fb:e7:a8:10:
                    7d:96:32:15:d8:96:f1:4c:d9:74:1e:ac:f9:b6:e9:
                    42:c2:d2:bb:13:53:38:df:32:f7:7b:22:ed:59:12:
                    47:6a:30:23:e5:ed:d2:a9:1f:cd:40:27:56:66:30:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:27:F3:03:98:28:9D:49:B1:61:F6:15:40:F9:C0:53:32:AD:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/458d5f6c-2d9b-3d48-8acf-cc61421f341b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:8f:93:8c:ad:c3:4a:03:42:6b:de:bd:24:97:73:77:c8:
         4c:ef:70:6f:40:a4:c3:40:34:b5:09:bb:a7:03:99:e6:16:e4:
         d9:ac:88:44:2e:8c:e7:41:ea:09:98:0a:1e:ed:09:c6:c8:66:
         2c:2f:24:bd:3d:00:8a:e4:29:5a:26:ea:f9:00:2f:5a:52:1f:
         4e:7b:09:aa:cc:5a:be:3a:9b:fd:19:71:f4:f7:1c:08:32:de:
         d8:96:ef:27:2d:cc:bf:5a:45:2a:fa:4e:dd:12:3b:e8:32:3b:
         46:c8:1e:65:b3:a2:9a:9e:30:6e:1a:38:29:03:32:a7:33:a9:
         ad:22:c1:35:fb:76:4b:94:76:72:01:7b:aa:fa:7b:42:ab:2a:
         51:8d:6c:f2:31:04:20:5c:ae:58:1d:78:10:a4:88:6c:de:3c:
         cf:b2:59:c6:5d:f1:b3:f7:eb:9d:b5:c6:f5:0d:8d:5b:b5:4a:
         a0:39:40:be:7e:de:66:f5:ca:2b:88:b7:30:c0:68:16:38:4c:
         11:3e:a9:d3:75:1c:ff:70:3b:c8:30:87:b8:0c:dd:36:a1:32:
         f6:fc:18:44:da:ad:a3:ff:32:c7:7d:1c:03:ca:f8:31:80:19:
         5b:95:75:54:93:60:0b:48:5b:24:b9:d8:93:b6:19:b5:59:2e:
         1e:3c:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:00 2026 by rpki-client