Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed8f61cb-ac47-38e9-a028-bc6fad7a0ff9.roa
File:                     ed8f61cb-ac47-38e9-a028-bc6fad7a0ff9.roa (raw, json)
Hash identifier:          0UvGVxTCsrrlqt10ItOGBLI2WS71jolwe930kEOBjqA=
Subject key identifier:   32:2A:DA:81:A8:F7:48:B7:DB:03:D8:25:06:E1:57:A3:10:7F:35:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C3EA2DA7281835FB4D080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed8f61cb-ac47-38e9-a028-bc6fad7a0ff9.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396618
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:3e:a2:da:72:81:83:5f:b4:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=d4e7dd6d-32fc-4d98-871d-7f3e6719ea32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:4f:b3:75:bb:47:ce:a4:dd:f3:6c:79:4a:
                    ac:d4:32:18:b5:19:36:7e:de:46:f6:b5:67:de:0c:
                    95:30:c9:2c:8a:14:54:f9:07:a5:4c:f2:c2:21:8f:
                    c1:dc:06:21:c9:fd:9a:e0:2d:3c:93:76:64:b2:22:
                    1a:58:a6:5b:6f:ab:02:43:98:92:99:4d:83:d7:b0:
                    77:43:c0:2a:ae:5d:a3:41:43:31:1c:72:0c:09:8e:
                    36:b3:11:3a:7a:8f:09:07:bf:a7:9b:31:0c:ec:d7:
                    d2:6d:b2:9d:33:74:8b:ff:15:ad:1f:e5:01:f8:27:
                    f0:60:69:dc:87:53:58:12:17:f0:25:81:ca:67:87:
                    6f:4b:e2:38:c0:c7:04:6a:6d:83:6c:18:83:7b:0d:
                    d0:d2:ce:ee:fc:72:ec:47:87:36:1d:d7:3b:55:19:
                    6b:4c:3b:44:88:1e:23:95:30:72:2b:75:f9:0a:5d:
                    84:fb:1a:66:5a:d9:fb:75:06:6b:ea:d8:a6:67:af:
                    fc:d7:ef:35:eb:fb:d1:db:30:a2:3e:24:a5:86:37:
                    e0:1b:14:f2:3c:9e:34:b3:ed:67:33:39:ef:3b:84:
                    f8:8c:b3:6c:4b:95:1c:27:42:7c:45:ff:cc:5b:1f:
                    b9:92:f9:80:88:6a:93:53:99:05:5e:8a:9d:ba:3a:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2A:DA:81:A8:F7:48:B7:DB:03:D8:25:06:E1:57:A3:10:7F:35:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed8f61cb-ac47-38e9-a028-bc6fad7a0ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:32:89:68:29:3a:68:fa:c5:42:df:fd:f6:92:f5:ab:15:
         4d:a3:69:2c:31:f3:ca:2e:b7:3a:64:85:29:fb:e5:c7:7d:b1:
         b5:f6:87:c6:04:10:ea:7d:df:ab:a0:18:48:e5:18:19:06:c5:
         84:0a:a9:a8:0b:f4:72:a6:88:a3:87:d0:a2:cd:a0:74:47:0d:
         34:a7:b2:fc:43:53:84:42:38:96:c5:25:30:6d:e9:4c:8e:80:
         50:87:02:f1:10:ac:0e:ca:72:91:2d:77:8b:fa:5b:e0:4f:2a:
         96:62:fa:d9:90:ca:58:21:c5:3c:a3:00:bd:45:e7:16:d2:a6:
         d2:5d:20:73:eb:b3:cb:b5:23:37:be:4b:28:dc:13:79:61:e6:
         98:80:87:f1:0b:a2:69:e9:49:cb:ef:aa:bb:d5:9c:3d:06:2b:
         01:08:d0:bf:55:8a:15:44:b7:c3:48:98:47:27:be:30:d1:a0:
         b0:e4:61:c3:36:d0:78:92:58:5d:16:f0:e0:fd:56:40:a5:77:
         6e:68:c6:22:29:f7:bc:7a:29:af:ef:78:64:8b:f3:cc:4b:83:
         54:96:6c:6e:54:56:6b:ad:1a:0a:61:b5:72:e8:03:a7:98:23:
         9e:62:76:d7:31:de:38:d6:b8:7e:72:a2:22:53:a9:3b:2a:0f:
         88:f9:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:14:35 2026 by rpki-client