Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ce7576-a09e-3599-8b38-cc7c3550033e.roa
File:                     42ce7576-a09e-3599-8b38-cc7c3550033e.roa (raw, json)
Hash identifier:          DOkSn/u2EVP0Fgf8fEqSpOPQkRR/IBJNixhFLOcgiWY=
Subject key identifier:   0E:C3:93:75:F4:EF:97:63:DF:04:79:97:90:CF:75:C6:1B:07:F6:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C389B7BEF542047CD8280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ce7576-a09e-3599-8b38-cc7c3550033e.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396540
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:38:9b:7b:ef:54:20:47:cd:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=3b92e5d3-4944-4c71-a2d1-4e7471145dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:40:42:17:72:bd:83:52:03:19:6d:8a:77:
                    69:10:4a:ff:ae:97:47:a6:e9:39:92:3e:1a:d9:4a:
                    3c:2c:11:89:77:5b:bf:d2:6b:28:b0:d6:32:1c:6d:
                    b8:2c:38:ff:37:d8:bf:c5:7d:a5:d3:85:f2:b8:39:
                    63:72:2d:84:c3:16:4e:fb:5e:2b:c3:e0:23:5c:6e:
                    2d:76:3d:92:21:4f:92:81:f9:fd:c4:eb:cc:46:fc:
                    c7:9f:b7:04:01:2e:d0:e4:b3:8b:5c:9e:f7:00:0d:
                    56:b2:34:5a:94:7d:78:07:ba:9d:b5:ae:86:c3:4c:
                    d5:41:86:a4:66:b0:54:3d:19:15:e0:b9:aa:d0:c6:
                    86:4e:c9:10:fc:e6:ef:d5:63:3f:ed:b3:d8:b6:75:
                    91:34:59:4d:56:36:59:70:9b:db:80:75:59:ef:8d:
                    58:0d:aa:7a:1d:33:06:74:aa:2d:a7:a5:e6:c5:eb:
                    7d:10:79:f8:f0:52:b6:73:84:20:3e:fd:0c:f8:a5:
                    f2:14:6b:c4:6f:23:60:c3:5c:ae:1b:35:4d:9b:40:
                    54:c4:d4:cd:61:48:06:62:dc:44:37:d1:c1:05:3c:
                    48:ba:47:ee:4b:46:b6:1b:9e:bb:31:8d:0f:7e:4b:
                    7b:7e:5d:77:4b:5d:bb:78:03:7e:ab:a7:2b:f1:57:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C3:93:75:F4:EF:97:63:DF:04:79:97:90:CF:75:C6:1B:07:F6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ce7576-a09e-3599-8b38-cc7c3550033e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:50:32:40:59:70:51:c9:d5:92:33:92:a8:22:9d:f0:3e:56:
         bd:42:0a:9f:ec:ee:ff:3c:4c:1a:82:b0:d1:50:d9:09:e5:06:
         8b:f0:30:63:c8:66:4d:3b:e8:ab:d9:2b:cb:41:00:fe:10:50:
         60:bd:53:0c:a6:ad:04:9a:92:00:9c:75:84:70:05:c1:ad:07:
         e1:ec:8b:25:e7:ad:17:f2:22:31:1b:8f:cf:bc:1e:90:3a:ce:
         10:82:57:37:3c:a1:cd:82:6b:4b:80:20:85:44:9e:f1:32:13:
         81:f2:99:a9:24:d9:ae:d9:bc:40:e2:c5:77:b2:03:e4:75:d6:
         89:96:cd:e5:86:c9:94:89:03:0c:fb:be:86:42:a9:60:98:10:
         21:bb:4f:67:6a:94:8d:b7:e1:a2:57:e8:a5:db:ff:ad:a0:e8:
         c9:57:3a:5f:29:fa:6c:dc:8f:08:73:d2:3a:05:02:bf:21:96:
         71:78:2a:a9:d8:a9:ad:24:d9:b7:75:56:9f:b4:b8:10:e0:c3:
         c6:04:89:b5:24:00:a5:7c:d3:d4:da:4c:59:67:08:6f:a6:02:
         87:be:7a:8b:39:06:52:b3:36:d7:7e:34:f2:90:f8:79:c2:57:
         67:98:cc:46:fe:f5:0b:d5:2b:8e:e0:f1:a1:97:2d:c3:aa:f8:
         dd:21:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:55 2026 by rpki-client