Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efeaf737-9515-3d4c-bc3e-c532500195cc.roa
File:                     efeaf737-9515-3d4c-bc3e-c532500195cc.roa (raw, json)
Hash identifier:          CkvCXqSCQiCg0zXj5gGYmY+KI2YcmJkhItJmBWXCp2g=
Subject key identifier:   EA:7F:C7:4F:30:6B:49:62:60:13:06:DC:39:1B:E3:EE:28:69:19:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC4D7152F8957D40426885C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efeaf737-9515-3d4c-bc3e-c532500195cc.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     396553
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:15:2f:89:57:d4:04:26:88:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=54597fc2-442a-42a5-be9f-09902967f4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:a5:71:30:94:03:8c:26:00:ee:67:21:0e:
                    dc:2b:11:80:29:6a:86:5a:f0:94:3a:21:84:fa:0a:
                    ea:b6:14:8d:9a:f6:1c:4f:bb:0a:05:45:fc:ec:0f:
                    8f:dd:ed:08:f7:b9:d9:30:3a:35:de:c1:36:6e:c0:
                    39:3f:42:aa:a2:59:2f:3c:a4:ba:92:e5:0c:6f:13:
                    5f:6c:fc:c1:e0:09:aa:69:2a:9a:b6:ee:df:4a:55:
                    ae:13:4b:7d:58:a3:76:11:2a:ad:45:42:cf:bd:6c:
                    83:80:e6:c4:8e:1c:d9:55:36:93:30:7a:57:5b:5a:
                    1f:2e:29:3c:67:72:a9:be:66:f1:69:5e:25:3c:07:
                    64:7e:49:f5:b1:f5:dd:70:42:63:72:09:64:12:65:
                    84:c1:7d:eb:0b:42:89:ee:86:92:67:57:9f:70:84:
                    db:53:a2:2c:6f:3f:00:bd:e5:62:b2:22:3e:83:ac:
                    b8:d0:92:11:d3:ad:af:b7:ba:e4:34:96:35:8b:4e:
                    84:e4:68:a6:b2:0a:66:2e:7c:21:d8:b1:f5:27:29:
                    ae:75:08:d7:f9:92:de:e2:c0:2b:98:67:95:90:93:
                    f7:32:b0:86:9a:69:8c:9c:51:42:a4:23:7a:9f:fd:
                    9f:ec:a0:bb:c7:19:89:d9:11:53:36:2a:1b:7e:22:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:C7:4F:30:6B:49:62:60:13:06:DC:39:1B:E3:EE:28:69:19:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efeaf737-9515-3d4c-bc3e-c532500195cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5d:47:a1:a3:33:31:b3:78:ee:94:31:bb:65:dd:73:8b:af:
         14:37:c8:81:50:f7:19:e2:c6:2c:ff:75:51:c4:d5:2a:7b:3b:
         94:e4:1e:4d:23:33:ce:08:bc:98:f0:0e:f5:a5:af:1e:2c:4a:
         d6:0f:a9:2b:c6:57:32:fd:5c:44:d7:6d:43:6f:1f:7e:76:0b:
         1a:d5:63:b8:0e:28:4b:15:46:39:ae:73:ee:b2:ff:2b:15:d5:
         d6:bd:0e:b8:40:63:94:56:e6:89:8f:b2:32:57:e8:f4:92:de:
         d8:00:37:e5:2f:f3:35:b8:97:80:79:96:40:f7:37:10:f8:86:
         d1:fc:65:5a:9e:5d:72:03:1f:6d:58:4f:c6:b8:fb:6c:f8:d4:
         68:14:ad:3c:ef:63:d3:ae:fa:9c:d4:62:11:96:7f:69:67:dd:
         aa:bb:4b:c4:9e:ef:87:3e:26:b7:40:fd:6b:7c:0f:bd:26:32:
         08:6c:12:fb:15:ba:71:3a:fa:70:12:28:05:68:89:a7:e3:27:
         a2:7c:c4:d2:41:5a:10:37:36:e0:7e:b2:ca:e2:55:ee:d1:89:
         f2:a2:cb:27:6e:ee:ff:ed:0a:31:6b:14:57:c5:8f:27:7e:61:
         64:12:fb:3b:6e:43:75:84:e5:e1:ca:85:ab:00:0a:2a:aa:3a:
         5d:d3:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:27:18 2026 by rpki-client