Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4798a3a-ef2b-38eb-9034-f5fece871fa3.roa
File:                     e4798a3a-ef2b-38eb-9034-f5fece871fa3.roa (raw, json)
Hash identifier:          pijOPqm2kUAJ+mSMLhsTSbsMOCRxJKLdDbGME9RrF+Y=
Subject key identifier:   F9:59:FC:4E:E1:68:1E:5D:4D:F9:81:28:57:15:13:DB:56:28:3C:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788C765E6253794F8EAB880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4798a3a-ef2b-38eb-9034-f5fece871fa3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397200
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c7:65:e6:25:37:94:f8:ea:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2d90de6f-9c0d-4725-8927-2a543c3278de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ac:80:bd:7d:49:5f:8e:c5:57:3d:03:73:ca:
                    9d:7f:a5:9a:cd:f6:6b:6f:63:d4:ca:a8:5a:a1:e8:
                    5f:97:69:e0:53:e4:2b:ae:5d:5b:a5:01:9a:3d:d2:
                    e0:92:33:63:41:fb:1c:6b:24:bd:d4:33:b8:82:a1:
                    c6:2e:e8:b0:a2:d4:6a:af:e0:a3:54:e9:62:da:57:
                    88:1f:1b:41:6e:8f:c0:65:97:48:43:33:34:13:57:
                    d2:26:86:6d:df:10:81:55:47:3e:90:5e:57:04:00:
                    1e:69:21:18:d7:df:e2:0b:45:e8:4f:95:e6:be:ce:
                    43:85:88:ca:ca:52:c5:75:63:e2:bc:e3:e6:78:63:
                    02:66:2c:b9:e6:ad:9b:fb:17:88:7b:74:6e:56:d7:
                    ff:a4:ea:3f:54:1f:36:3b:b4:95:f0:95:bf:de:fe:
                    43:37:7d:2a:33:f0:c7:a1:0c:8e:26:65:bb:4e:8d:
                    b7:37:33:9f:ca:01:e0:86:b4:b2:6a:43:88:5a:ca:
                    8b:0f:d2:a3:73:13:59:9a:b4:74:40:ac:0d:75:c8:
                    93:66:db:c4:5c:70:4b:10:ed:9e:c8:cb:0f:82:64:
                    8a:a9:65:70:52:b8:af:5c:7c:bd:88:88:16:07:b0:
                    2d:d0:07:70:55:a2:92:ad:dd:b8:91:6f:1b:67:d8:
                    7c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:FC:4E:E1:68:1E:5D:4D:F9:81:28:57:15:13:DB:56:28:3C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4798a3a-ef2b-38eb-9034-f5fece871fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0b:80:b1:55:81:22:5d:32:b0:72:dd:f0:04:62:a5:f7:13:
         c8:82:66:51:c8:14:e7:7b:60:80:c1:74:61:5c:9b:21:25:11:
         51:79:07:08:99:93:1e:ad:30:dc:75:1a:09:1f:3a:e4:44:3a:
         20:83:36:87:ae:40:47:e2:ed:c9:4a:5d:4d:80:6b:fa:6a:8f:
         e1:31:47:63:c3:17:e0:78:38:cc:be:68:32:ff:b7:c9:ab:cc:
         39:a2:22:47:51:cb:b3:3d:9e:be:08:29:7e:53:70:55:fd:41:
         cc:fc:06:d1:f4:da:32:26:4e:d6:e1:65:b4:88:ea:b1:5b:75:
         81:b8:4e:94:ea:e9:53:41:df:0e:86:07:f6:61:66:44:54:e2:
         50:95:58:e9:21:7f:8f:5f:fb:a2:2f:61:d7:60:fb:28:82:83:
         6b:3b:d7:82:86:d3:10:1a:ff:26:6a:6d:d0:64:bc:ec:f0:57:
         83:a5:25:30:de:30:4a:c7:80:b2:63:46:7e:ef:66:a2:2c:b1:
         f7:07:ae:df:77:99:0d:2f:26:70:cc:03:ee:82:13:8b:fb:bd:
         c6:d3:6c:73:0c:d1:a7:82:6e:82:59:b2:93:5a:d5:bd:7b:ab:
         6b:4a:01:ea:4f:b4:af:53:42:2d:1c:d4:77:eb:e7:7b:f8:93:
         9b:4d:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:15:00 2026 by rpki-client