Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f79c753b-5118-3af4-b1e1-02d9f5cf3689.roa
File:                     f79c753b-5118-3af4-b1e1-02d9f5cf3689.roa (raw, json)
Hash identifier:          K1zp/LqLaXFkr2gDMl3EtSfRK+O2XRZabCfqQ7Gv878=
Subject key identifier:   99:7D:99:62:FA:03:3D:E9:11:23:B3:06:81:66:AA:D4:33:29:AC:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C3B02381A6D84ABF6CB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f79c753b-5118-3af4-b1e1-02d9f5cf3689.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396542
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:3b:02:38:1a:6d:84:ab:f6:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=bd50dc57-8f93-427f-9354-0c1a51f40b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6d:c3:fb:03:4c:9c:30:c3:17:b0:93:e0:25:
                    05:6b:40:54:40:94:03:9b:e4:27:d7:58:ff:46:5c:
                    61:70:9c:3b:39:55:59:6c:e8:af:b5:c0:17:ca:06:
                    9c:0f:e1:75:c8:6c:2c:ed:26:86:30:33:3c:02:72:
                    3e:2e:ea:fa:c3:c7:71:85:79:26:fd:31:35:b4:54:
                    bc:a6:5f:a1:2d:a7:ea:f0:53:40:23:93:a0:7b:61:
                    06:cb:7b:d1:0d:70:95:69:95:8e:2e:85:f5:01:3f:
                    30:e7:fd:4b:5f:4e:7a:6e:ae:f0:df:10:60:72:a8:
                    ce:84:04:8d:e3:63:a2:fa:df:de:a1:6b:e7:73:77:
                    69:9a:0c:f7:82:10:ad:5b:a2:bd:80:cf:af:ba:09:
                    02:00:84:97:c8:a0:0b:ce:99:0e:16:97:fb:13:75:
                    40:52:e5:98:b8:65:89:c6:65:cb:a9:89:44:a2:5c:
                    15:2b:56:b7:b7:36:e2:13:19:43:f3:c4:00:d3:d2:
                    be:6a:0f:72:db:77:94:40:2a:14:9f:87:12:ef:4e:
                    a2:98:76:77:ef:8e:61:68:10:12:33:f5:b0:4f:a7:
                    90:0d:f2:14:20:38:8c:40:60:8f:12:38:1f:cb:1d:
                    04:68:ab:94:de:81:1b:cc:ff:3c:e0:30:af:74:ee:
                    a3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:99:62:FA:03:3D:E9:11:23:B3:06:81:66:AA:D4:33:29:AC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f79c753b-5118-3af4-b1e1-02d9f5cf3689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:66:83:6d:11:2e:37:74:f5:53:b9:4a:fd:cb:b9:42:50:
         19:88:96:cf:8e:2c:e9:fc:29:1a:ac:36:73:ec:54:9a:33:53:
         9e:3f:2d:00:76:fd:77:62:d1:45:cb:d4:5d:eb:76:de:62:32:
         d3:06:4d:39:91:7e:01:28:ab:64:58:cf:22:db:a4:b8:fd:e8:
         91:b1:98:f8:0a:a5:89:c7:ee:d9:c3:c7:5f:c1:e4:72:47:e3:
         29:9d:11:aa:f0:94:de:c1:c6:8c:3a:29:87:cc:23:4a:78:0b:
         97:16:74:2f:b6:5a:a0:68:5f:5c:3a:77:09:64:fc:78:62:03:
         1e:a8:35:bd:0c:fb:6f:0d:f2:94:2a:6a:e5:d1:2f:45:e3:35:
         fb:29:dc:a9:70:53:1a:58:55:ad:dd:47:1d:61:a6:29:8b:8f:
         4e:16:49:e9:07:33:69:82:85:53:bf:4f:a7:7c:f0:d0:3d:b5:
         84:98:0c:1b:dd:d9:28:80:bb:fc:d1:14:34:aa:72:49:88:5c:
         73:a0:6a:bd:cd:58:a1:3f:14:a1:0f:3c:ec:35:97:fd:be:85:
         9d:d4:72:e7:b8:a4:d8:e7:38:c7:b7:4b:e0:fc:a6:4d:43:be:
         3d:ce:b3:54:55:f0:94:f9:e2:55:37:84:26:68:1f:2d:59:7e:
         95:35:1b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:36:01 2026 by rpki-client