Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a820bc-6785-3cfa-90d2-6f96e07a79f6.roa
File:                     52a820bc-6785-3cfa-90d2-6f96e07a79f6.roa (raw, json)
Hash identifier:          Fv6tfPCJQ3eyrDWS22i13/zmXw4a+pxwY5WUk9JgpLk=
Subject key identifier:   05:8C:7C:FF:B1:4D:1F:17:1F:F9:4C:83:F6:5D:07:87:57:59:22:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA790607D997563A63E0057A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a820bc-6785-3cfa-90d2-6f96e07a79f6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396605
IP address blocks:        2001:503:d414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:60:7d:99:75:63:a6:3e:00:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2a46c7e4-2bb1-4516-a6e3-fca36975e27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:4b:5c:30:c7:6c:28:25:2f:49:4e:82:9c:
                    f8:fe:2c:d4:13:a2:04:42:68:3a:d5:85:e2:5a:a6:
                    8d:32:67:c7:30:54:67:00:9b:78:68:f2:97:0a:52:
                    27:c3:9f:cc:8a:5d:2e:8e:c2:ca:c0:1c:94:48:59:
                    b9:ca:7a:7f:9e:44:e1:45:61:ab:55:e1:c3:6d:82:
                    7d:d5:b4:8e:68:40:30:f8:9d:da:7d:ff:64:a7:fa:
                    25:19:54:6b:cf:da:d9:27:2a:60:14:9f:64:96:9c:
                    ba:c8:01:15:b6:20:0d:71:cf:14:77:72:0a:40:c8:
                    73:1c:aa:83:73:b2:30:1b:7f:38:ff:49:4e:1a:8b:
                    32:3a:aa:54:e9:9f:a9:8d:fd:dd:ee:ae:da:41:16:
                    3b:89:31:5a:df:a5:94:bf:50:8f:e1:2e:8c:6f:bc:
                    85:e2:fc:28:4a:cf:98:70:9c:8f:da:17:90:13:55:
                    c0:cb:ce:9c:f4:8d:dc:95:63:9f:ea:84:ee:6e:df:
                    38:51:87:dc:37:74:2d:3d:5e:1e:67:92:5c:d8:08:
                    74:b6:99:90:b0:67:87:98:37:7b:69:61:af:dd:28:
                    8c:ee:4c:3d:72:13:a8:f8:5e:ff:d3:36:0d:27:2e:
                    48:77:86:7c:08:7e:3c:2c:2a:31:f1:01:9e:f6:bd:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8C:7C:FF:B1:4D:1F:17:1F:F9:4C:83:F6:5D:07:87:57:59:22:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a820bc-6785-3cfa-90d2-6f96e07a79f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:da:5c:9c:d4:a8:05:e6:20:30:24:0b:85:11:39:95:ae:ae:
         21:80:fe:ee:6f:23:84:87:9b:94:71:c2:89:c7:f9:7a:56:07:
         ad:ac:dd:31:66:49:98:03:e9:27:0d:ec:a6:04:ba:2b:f8:2f:
         5c:c9:b3:2e:34:0a:37:2b:b4:b9:5d:4f:fb:11:87:43:08:d5:
         6e:8f:58:46:64:62:2c:f9:f4:29:13:28:f3:92:a3:28:43:92:
         60:3c:b3:f0:f4:8e:89:76:16:80:1e:d9:86:da:1c:af:c4:ed:
         ef:24:ff:54:fe:41:27:91:06:ef:5f:6e:15:94:19:11:20:74:
         6f:ff:c0:7e:26:c4:63:61:b3:bb:d4:7a:b6:f7:bb:80:ee:43:
         89:b8:38:a5:ac:32:9d:63:8a:aa:39:c0:80:a4:d1:ac:3e:98:
         0a:6e:b2:53:cb:13:26:7e:81:21:59:01:9e:0c:07:42:fa:ff:
         ad:9e:06:c4:a2:79:8e:87:e2:f2:32:64:1e:7b:39:06:7b:15:
         50:ad:16:fc:e2:e2:1a:ee:7b:73:5d:e6:f3:4e:89:a6:f2:34:
         b2:c5:24:47:ce:39:75:db:31:0c:ee:7f:a8:35:65:33:ac:a8:
         98:4a:d5:3d:c0:e1:e4:8b:b7:d8:85:4e:14:98:70:09:17:97:
         72:3f:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 04:20:17 2026 by rpki-client