Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef14945c-9b07-36ba-84c8-76e6f0417ec8.roa
File:                     ef14945c-9b07-36ba-84c8-76e6f0417ec8.roa (raw, json)
Hash identifier:          RrdhfB2eB0UjXPgGB6XlA/uth7UjdfShIUb80AL7yms=
Subject key identifier:   6F:26:56:F2:BA:2A:E3:56:C7:3F:0C:BC:ED:0A:3B:0A:30:38:1F:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA796EBDA1F2B5DF24654C500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef14945c-9b07-36ba-84c8-76e6f0417ec8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36632
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:eb:da:1f:2b:5d:f2:46:54:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bdf5424e-3d73-420f-9c65-edd6155119b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:9c:3f:90:6e:61:09:7f:e7:3c:87:7a:fb:
                    be:8d:ad:28:34:ed:88:db:e6:d4:a0:bd:29:47:f1:
                    b4:ec:b2:f6:5b:20:1d:1d:4a:a4:3b:10:31:c8:9d:
                    bc:e8:c1:51:44:a4:09:26:76:cc:06:90:d2:2f:91:
                    fb:8a:27:7f:9d:75:69:57:0c:b7:26:ed:94:c3:de:
                    74:a0:19:e9:24:08:15:bd:9a:e1:1a:e3:7f:66:ba:
                    bb:7a:3f:55:81:11:76:52:31:de:af:f9:61:4e:90:
                    d7:ae:7c:27:35:2b:c1:bd:14:b0:e5:1b:c0:bd:d9:
                    2a:2d:15:6f:98:dc:2e:d3:f9:8d:da:b5:f0:b8:ad:
                    2e:a6:8d:35:22:dd:b6:2e:a6:de:ad:b0:1c:5f:79:
                    9a:b7:7a:f4:42:8b:46:97:4d:89:c9:49:7e:ac:e0:
                    3c:bd:6e:5b:3a:6f:60:c2:60:80:79:c4:5f:19:8a:
                    a7:28:50:63:e0:8b:42:32:66:2b:b8:4e:64:a4:0f:
                    cf:9d:a5:b6:3e:5c:a1:28:b4:8e:75:0e:17:dc:67:
                    00:a1:9c:b4:fe:56:37:47:17:5c:db:af:3b:05:ce:
                    01:2f:7a:7e:8b:69:a9:5c:9a:49:ca:8c:7c:1c:69:
                    b9:65:be:7b:ba:05:5a:ef:de:2b:2e:3c:f7:95:86:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:26:56:F2:BA:2A:E3:56:C7:3F:0C:BC:ED:0A:3B:0A:30:38:1F:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef14945c-9b07-36ba-84c8-76e6f0417ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:c4:9b:45:72:2c:77:35:51:8e:17:5e:32:e0:e8:39:60:
         71:61:1a:2f:49:92:62:f3:76:ca:5b:18:61:58:a2:07:f4:c0:
         dc:17:6d:83:8d:47:3b:f5:47:fc:3e:8c:cb:f3:3c:e4:07:f1:
         10:fc:ad:79:00:b3:ad:a5:6c:e7:3c:99:61:97:86:7f:92:d7:
         a1:cd:a9:66:0a:2a:c8:14:66:b2:22:30:c2:54:44:bc:3b:0e:
         d2:d7:4b:5f:b1:16:48:d6:dd:cb:7d:df:37:2b:a8:b6:e8:8a:
         34:f6:1c:ea:7a:07:89:2f:48:37:c3:72:5d:b7:64:73:b3:4c:
         2a:69:f2:1c:78:5b:f8:35:8c:20:00:c5:a3:e0:48:e4:03:b1:
         09:4a:70:10:13:98:6c:78:53:cd:36:cf:3e:83:51:c9:14:c5:
         64:fd:74:03:da:fe:cb:77:04:f9:ba:d7:6a:72:9a:4a:56:6c:
         cd:36:62:a8:3e:1b:56:1e:66:45:b7:c3:96:5f:bd:82:fa:43:
         db:73:eb:ac:7a:5d:13:9e:c6:bb:bc:27:49:95:e4:15:72:1a:
         f2:2f:33:43:d6:09:96:c7:3f:80:6c:00:d7:05:8d:7f:e6:8d:
         f4:b6:b1:62:35:95:21:42:24:8d:51:2b:93:d6:7c:af:b0:0a:
         22:db:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:38 2026 by rpki-client