Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9563db50-0353-37d5-88cf-0d73d5c4c2d9.roa
File:                     9563db50-0353-37d5-88cf-0d73d5c4c2d9.roa (raw, json)
Hash identifier:          dtxITyyOnnLT/qy2UKEYX51XnzYk6BlZpJJyayEGJEI=
Subject key identifier:   09:FE:D5:E1:7D:19:3C:AD:C6:B8:4F:EB:EF:E2:16:53:12:DA:F9:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78EF0350358BA904B837F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9563db50-0353-37d5-88cf-0d73d5c4c2d9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396546
IP address blocks:        2001:503:83eb::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8e:f0:35:03:58:ba:90:4b:83:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c4768380-b8dd-4742-a990-0f09c40183d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:b9:bb:00:14:b7:c2:36:47:67:94:2c:19:
                    ee:04:cc:23:ae:3e:31:b7:fe:ce:ae:9c:07:a6:9d:
                    6d:81:64:03:6a:c3:c9:8d:0d:81:9d:bd:82:07:c0:
                    dc:dc:68:f1:ac:69:08:15:06:bc:a7:74:38:a6:f1:
                    6c:2b:dc:26:50:98:6f:db:d6:16:a4:e6:e1:ae:09:
                    a5:34:19:b4:17:21:07:85:13:ff:d5:7c:1e:2f:4a:
                    9a:fc:03:e6:e6:aa:c4:54:8a:49:7d:07:17:18:46:
                    1a:a2:28:b0:c9:05:ba:e5:b1:ef:26:69:72:29:85:
                    85:98:44:ad:f3:d4:3a:d0:9a:3a:16:98:1c:17:31:
                    35:eb:c6:f6:05:96:7d:5b:ad:f2:02:72:45:13:4c:
                    6c:c0:9e:d6:e0:df:a1:6d:ac:7c:aa:e2:e6:8b:ae:
                    8f:e3:37:c0:4b:2d:96:37:c6:b3:fa:53:3d:a5:e7:
                    58:5e:36:bd:dd:17:a3:62:59:de:73:a2:b4:3d:3b:
                    74:c5:27:9d:9e:05:9e:ac:e3:e6:4b:31:6d:7f:ab:
                    cf:0e:15:92:21:2f:0c:79:a1:63:20:ab:e5:a3:e3:
                    cc:e0:7a:ff:30:b2:69:36:80:32:e3:d1:fe:2c:aa:
                    a5:cb:43:13:17:85:11:ca:1e:86:1c:a2:82:c9:17:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FE:D5:E1:7D:19:3C:AD:C6:B8:4F:EB:EF:E2:16:53:12:DA:F9:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9563db50-0353-37d5-88cf-0d73d5c4c2d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:68:88:e9:e4:76:78:ba:1b:4a:f0:87:f2:fc:3c:b0:c3:78:
         66:02:4d:78:03:3b:49:d2:5e:0e:8e:b7:d2:ec:46:14:1b:57:
         ec:da:b6:79:46:f2:d5:6e:1d:ef:af:e2:a6:84:91:f9:46:44:
         70:fa:0b:55:cd:f1:e8:de:a7:52:cc:7e:18:7f:c0:ae:b1:e9:
         3c:45:dc:f3:cb:e0:5c:ad:ff:7e:5c:da:3d:cc:33:ac:90:92:
         d4:ff:76:eb:44:49:dd:47:f8:c6:96:1f:f6:c1:f8:18:46:10:
         f4:d5:c8:60:69:04:04:c0:f7:66:88:32:3d:1b:94:61:c1:b3:
         20:ac:60:28:00:3a:1d:a8:83:81:c4:ab:d0:b5:fc:0d:c1:d5:
         f0:79:c9:70:7b:64:49:64:c5:a1:3a:b1:4d:1b:a8:be:45:f3:
         32:11:46:8f:e8:30:fb:90:9f:56:25:58:9b:61:7e:87:b8:60:
         9a:2c:b5:b8:a1:0f:2c:73:88:51:60:ed:2f:af:ad:c6:6a:04:
         97:19:15:6a:54:6f:65:26:8e:34:00:fb:d6:83:da:3d:87:3d:
         e4:c6:be:c3:f0:57:9d:25:cf:db:ce:f7:a8:8e:1d:78:f9:b9:
         84:61:39:1f:f3:83:02:8d:66:20:6e:c0:c0:bf:06:7b:2c:00:
         bd:41:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:27 2026 by rpki-client