Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa
File:                     a07bc41a-66df-3190-be8f-7d32ceb83809.roa (raw, json)
Hash identifier:          gxu5010ODib8yeUvTwbNxmyBYOY110FAEyO4klrG9Pk=
Subject key identifier:   18:2B:3B:40:E7:6B:71:7E:D9:EB:EB:A1:A0:27:C5:25:0E:E1:07:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC4D70BFB8C57978D48EB3580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     36626
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0b:fb:8c:57:97:8d:48:eb:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=70d9dd6d-65ab-49e2-bd46-acdb1bcc08b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:1f:38:b5:ba:b0:50:68:9a:65:b3:8b:8d:
                    4a:6a:7f:ab:b2:1b:6b:28:ec:33:9b:1b:cf:26:c0:
                    a5:fa:b1:08:ce:f2:25:9f:11:db:18:c9:4a:71:39:
                    78:03:e3:88:47:e6:cd:41:7a:1f:df:67:3b:74:34:
                    76:a7:3f:a3:93:9f:8f:61:ac:8c:fc:65:9b:25:c3:
                    54:1e:2d:c6:6f:eb:38:bd:48:ab:51:6c:06:d8:b1:
                    11:2e:ce:72:21:71:29:e9:31:d8:71:74:d4:29:32:
                    40:f7:32:3a:83:12:c8:a4:74:5e:bf:4e:97:c0:f2:
                    10:5e:6b:d6:f9:37:fc:e3:3e:ea:fa:fd:25:6e:b7:
                    fc:a2:e0:cb:c8:6a:c4:8c:42:c0:6a:2f:cd:f4:23:
                    f3:1b:c3:a6:b6:1b:da:1d:37:fb:f6:a6:fb:6d:cb:
                    08:15:0d:bf:83:6c:fd:b2:14:16:3a:4a:1e:3f:c3:
                    10:d4:f5:0c:de:e1:e5:e9:b5:e7:97:67:b4:18:e6:
                    a3:54:79:f5:ac:17:e5:04:cb:f7:ac:22:a8:8a:9a:
                    63:ee:47:32:ee:fa:0b:fa:26:af:27:02:19:0f:a0:
                    1e:bf:a2:92:ee:9b:07:31:71:83:d0:3e:d4:4d:19:
                    09:9a:0e:43:63:34:32:1c:cf:0e:f2:98:82:7f:e6:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:3B:40:E7:6B:71:7E:D9:EB:EB:A1:A0:27:C5:25:0E:E1:07:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:67:5a:b9:6b:8e:80:1c:41:bf:8a:4f:a5:8f:28:c8:9e:3f:
         97:41:d6:43:80:91:ec:dd:a6:48:19:1c:91:03:bf:c1:b3:15:
         9e:af:91:6e:39:7b:82:27:bc:ca:60:09:6d:27:b4:54:35:9d:
         3d:96:c6:7c:94:af:18:92:d0:d3:fa:81:ab:9a:d0:4a:7b:78:
         ce:61:8e:e1:0d:53:da:b6:2f:06:ef:db:25:43:12:ed:40:ab:
         52:ab:ea:70:b8:ef:14:9c:e4:48:1d:cc:01:d8:a4:a7:00:21:
         c0:f7:78:68:c4:47:66:27:01:dc:75:1f:8a:9c:eb:d3:d2:f2:
         b5:31:a4:b7:ab:bf:d0:fb:70:a4:62:ea:2f:c0:4c:a0:b7:7e:
         94:cb:4a:fd:79:3c:3c:ec:26:7e:48:38:28:44:46:3f:3a:a4:
         3f:2d:fd:3f:77:5b:d6:9b:30:1f:9c:d5:60:13:30:f9:0d:cb:
         50:f3:bd:85:2e:25:75:3e:83:12:94:54:38:37:04:44:e0:bc:
         4c:ac:45:6b:d5:47:b9:7f:12:ed:b6:91:8e:40:ce:73:5e:4b:
         ed:ae:2e:ae:49:ac:bc:34:b6:45:54:5b:25:a8:a7:53:0b:fc:
         0b:0e:d3:e2:28:7e:d2:51:77:b8:09:91:a1:ad:16:60:d5:65:
         ba:4f:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:17:53 2026 by rpki-client