Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20c508a-3c00-3d4f-a9d2-826820614010.roa
File:                     a20c508a-3c00-3d4f-a9d2-826820614010.roa (raw, json)
Hash identifier:          0AXWKV7qPms7M1908hdjifNs5IO+o9alpELGRPyluio=
Subject key identifier:   4C:C5:8B:6E:2C:10:21:A6:1E:86:40:22:75:F3:35:B1:5E:89:DE:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C3B0FC554084FFAA0A480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20c508a-3c00-3d4f-a9d2-826820614010.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396766
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:3b:0f:c5:54:08:4f:fa:a0:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=8aa2d89f-8531-455e-a83b-7bd98026525c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:28:c1:b1:48:b9:2f:ff:22:aa:bc:32:09:
                    c0:ed:00:f2:c8:95:a4:fa:0e:19:cc:45:b1:30:c1:
                    8a:f9:58:65:18:17:3d:3f:5f:d3:41:8f:17:fe:96:
                    9e:d8:62:dc:dd:00:06:de:9c:8f:59:60:e9:91:80:
                    7e:21:f7:84:21:b0:2f:5e:30:4e:07:0c:cf:af:2a:
                    1a:d7:dc:33:25:79:4a:fd:bc:55:76:f1:d6:90:da:
                    a2:03:5f:68:cd:7e:83:ac:74:cf:9a:25:14:58:6f:
                    fd:34:7f:7a:0b:a4:c8:11:00:34:dd:aa:fb:25:43:
                    ba:39:0e:c5:0c:f5:11:6b:81:cc:c3:ab:11:99:e6:
                    ae:ca:fc:1b:21:c3:ca:7c:9c:79:ef:fb:1e:61:9d:
                    fc:1e:55:56:fa:6a:67:4d:3b:07:fb:21:6e:a6:3e:
                    10:51:fd:9b:c7:04:2f:16:f2:b9:4c:bd:f2:6c:f7:
                    33:98:7d:07:c3:8c:74:d1:6a:8f:ef:cd:bb:a2:4d:
                    c6:f4:a0:ed:e2:6c:99:28:f9:ec:3d:0a:1f:5c:eb:
                    61:6f:68:a0:39:aa:eb:6e:92:9e:5d:c5:3e:42:cd:
                    ac:b8:32:a5:f5:cf:f7:99:8f:cf:3f:4b:76:46:f5:
                    34:4c:54:c0:64:95:75:22:22:dd:da:16:ee:72:ca:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:8B:6E:2C:10:21:A6:1E:86:40:22:75:F3:35:B1:5E:89:DE:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20c508a-3c00-3d4f-a9d2-826820614010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:0b:b5:0f:ad:16:e5:48:1d:0d:2f:f4:5b:fb:2a:43:35:2f:
         58:ec:d2:b4:06:10:5e:c0:46:d1:a2:02:70:8a:18:67:a1:2f:
         2d:64:d1:90:d5:b8:6a:01:e6:25:0f:4c:9b:49:81:37:11:86:
         84:6d:6a:1d:60:3d:cc:ba:87:0b:3e:59:cb:01:31:0e:89:3b:
         03:8b:93:9d:a3:97:69:e1:e8:fa:6e:ce:02:8f:65:7b:bc:ae:
         b5:9b:69:84:85:f4:8b:54:3d:ab:24:52:f8:99:83:1e:3e:b1:
         ea:af:6e:8a:20:02:e3:09:70:23:32:53:aa:aa:c2:ae:df:e5:
         14:ce:4d:a8:30:bf:82:34:b1:9d:e1:ee:df:22:ec:b4:1c:9c:
         5a:af:f1:68:d1:7a:19:1a:8b:9d:af:6c:74:11:16:1e:03:2d:
         eb:e5:81:12:65:47:0f:a4:86:e6:48:bd:ce:1b:b2:a1:3c:27:
         1b:09:ce:35:21:05:b3:a3:5a:54:e9:f0:42:02:62:8b:05:be:
         a1:0d:a3:c5:8b:05:a2:36:ef:9f:47:e4:14:42:92:10:ed:42:
         cc:2b:8f:15:24:4c:9a:d4:0a:96:55:5b:56:db:5d:98:2e:22:
         eb:5e:1c:a2:ff:cd:7d:b4:2a:05:bc:cf:e3:ab:ae:4c:95:44:
         d4:ee:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:49:40 2026 by rpki-client