Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad13714-4af1-3761-bbea-3002c8b4307f.roa
File:                     3ad13714-4af1-3761-bbea-3002c8b4307f.roa (raw, json)
Hash identifier:          ub5qTAmN2IYZkYCTFoLZrhzFdk//m2xcBoNAJDEPYV8=
Subject key identifier:   1D:38:51:CD:F5:B4:12:46:8D:9D:90:E0:5D:F8:2A:72:18:C9:68:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C3D6EEA595AD389E7B580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad13714-4af1-3761-bbea-3002c8b4307f.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396649
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:3d:6e:ea:59:5a:d3:89:e7:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=e2a75ae4-e5d7-445f-a303-bf4536d9f9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:12:a1:91:bd:99:78:00:c0:6f:2c:fc:13:
                    80:3e:2b:a2:14:9f:b4:81:bc:e1:f3:1f:fe:8a:00:
                    9f:e6:ec:f9:ed:37:f3:66:65:ed:aa:4a:e2:46:f4:
                    41:20:b4:28:af:f7:1a:b5:7e:ab:08:bc:81:57:35:
                    4a:32:7c:c3:b6:c2:96:5f:7e:a9:b7:30:e5:f6:12:
                    46:23:81:9e:a0:35:72:0e:22:95:ee:7b:d6:3c:42:
                    5e:9d:a7:6e:34:fd:8d:ca:bf:16:80:04:9f:cd:6d:
                    e3:95:f0:79:9c:93:91:0a:fc:82:e0:38:64:3d:5e:
                    de:ef:1f:e2:35:ba:71:fe:84:1b:75:d1:9c:aa:e1:
                    e7:98:58:6b:5d:74:c9:a0:a9:71:f6:ac:70:17:47:
                    67:db:67:b8:07:cd:bc:fc:d3:be:62:dd:fa:a6:d4:
                    ec:ae:4d:4e:e1:44:62:8d:23:4c:c6:c7:b1:33:a7:
                    2a:a3:f3:8f:cd:04:6a:35:57:f8:fa:43:73:e4:fa:
                    6b:8f:6e:27:97:84:98:13:ee:e4:33:d7:e8:6d:62:
                    56:6f:a8:ca:30:ef:78:3b:25:f9:d3:1c:28:55:e6:
                    1e:f2:e7:9c:a5:ab:1f:b0:ae:cf:13:8d:29:34:5e:
                    73:9b:76:59:22:f5:31:18:75:55:74:0c:18:26:8d:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:38:51:CD:F5:B4:12:46:8D:9D:90:E0:5D:F8:2A:72:18:C9:68:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad13714-4af1-3761-bbea-3002c8b4307f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4e:da:3a:d5:2f:dc:56:74:0d:85:0e:8c:27:5d:ea:fb:ac:
         b8:85:5e:34:68:3e:4e:42:21:09:38:70:df:31:26:e1:2b:d2:
         6f:d1:9d:5c:43:5c:2b:30:d7:de:9a:cf:99:8d:91:4c:16:d6:
         6c:28:15:60:4c:0d:a4:d7:56:2a:76:ef:1f:8a:f2:8b:61:0a:
         ea:58:4c:d1:f1:ae:bb:a7:96:6d:0c:a1:09:cd:50:74:f0:fb:
         c7:a0:1e:57:44:ec:59:72:8c:88:ee:43:07:0b:d0:33:ab:e8:
         c0:db:cb:c3:9e:1a:34:14:25:27:48:a3:a6:1a:28:98:79:89:
         55:6a:d7:a6:14:57:de:02:c5:24:e1:40:74:f8:95:59:3b:de:
         14:48:e8:62:d0:1e:9b:48:9a:3a:26:c9:1f:27:1b:ca:f0:9b:
         b6:54:44:80:ec:e0:7d:14:c9:90:d4:59:3a:0e:13:de:56:aa:
         df:29:88:70:0a:43:7f:a6:ac:88:1a:84:8b:b1:ef:4a:f1:2b:
         05:09:b4:53:21:1b:f2:3d:41:e0:3b:b8:dc:a7:dc:83:63:5f:
         51:e0:06:c3:fb:68:9f:08:28:57:17:72:4b:7e:7b:9f:86:4b:
         09:37:b5:5d:9c:ea:ac:43:54:d1:7a:86:d0:e1:34:68:12:20:
         ec:f7:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:08:42 2026 by rpki-client