Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa
File:                     2bd126b7-2be7-355a-ad57-44a85047e0cf.roa (raw, json)
Hash identifier:          v8pKw0IWRSZr2PmQ6HQZL213BaCXBjO8KcXSvosqdmQ=
Subject key identifier:   F5:DD:2F:D4:21:3F:51:18:3B:32:83:CA:04:03:FA:8A:50:0C:64:3F
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F4328584E937620712044F7A466ABB980
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa
Signing time:             Tue 21 Jul 2026 20:30:21 +0000
ROA not before:           Tue 21 Jul 2026 20:30:21 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     27553
IP address blocks:        64.27.192.0/19 maxlen: 24
                          64.255.64.0/20 maxlen: 24
                          66.79.192.0/19 maxlen: 24
                          69.54.192.0/19 maxlen: 24
                          209.142.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:76:20:71:20:44:f7:a4:66:ab:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Jul 21 20:30:21 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=3062fe53-420b-4493-9a25-6477d4821722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:2a:05:a8:fa:d9:0c:70:a5:45:34:34:43:
                    95:e5:3f:7e:7e:a5:43:6a:3a:55:17:90:1e:e0:bf:
                    77:69:72:3a:1b:4f:d2:1b:f5:f8:70:3a:75:ec:98:
                    4c:cb:e3:6e:4a:ca:2e:8e:fa:9f:aa:1f:59:94:cb:
                    cb:bb:86:57:f5:52:d4:d9:cd:5a:bc:b1:51:6b:4a:
                    b3:88:6d:c5:a2:c4:80:bf:b8:47:d3:5f:df:27:17:
                    4d:f7:d5:e0:40:a3:24:0b:a8:83:08:1a:27:63:3a:
                    28:74:90:85:3c:12:c9:ee:5f:df:ed:8a:c1:ae:b0:
                    b2:b9:e2:19:0a:1e:45:7e:b8:62:75:64:91:7f:b7:
                    01:0b:fe:f6:69:70:9c:8e:e0:65:b3:2d:50:1d:6c:
                    94:ab:be:c3:75:74:40:88:2e:53:cf:0e:f8:61:02:
                    b1:1a:7f:4b:3a:8d:3e:62:ac:42:ac:5f:c3:66:10:
                    1d:8a:3a:58:88:e8:92:2e:3b:a5:06:67:11:b8:42:
                    59:48:07:db:01:44:66:d9:2d:6a:d4:a8:05:91:de:
                    76:47:8c:95:6c:66:40:ad:1d:ed:40:35:70:1f:60:
                    cc:b5:65:25:08:ae:5e:9b:67:67:d4:a9:c3:b3:04:
                    7f:bf:be:e6:06:a2:5c:17:ac:6b:65:47:b6:8b:b6:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DD:2F:D4:21:3F:51:18:3B:32:83:CA:04:03:FA:8A:50:0C:64:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.27.192.0/19
                  64.255.64.0/20
                  66.79.192.0/19
                  69.54.192.0/19
                  209.142.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e9:77:71:ea:9f:78:aa:dc:7c:ce:6c:4b:91:6d:2b:a1:0a:
         9a:ea:23:b1:ed:9b:af:66:db:54:9d:73:99:df:e2:40:72:c0:
         13:5f:be:49:6b:38:a5:c0:8e:50:a1:de:9e:00:a9:84:ff:ca:
         cb:02:54:a6:47:da:b3:28:6b:12:42:da:07:97:86:eb:a4:a6:
         64:81:5a:0c:ad:81:97:40:e2:38:73:ed:58:2e:ae:1c:ff:5e:
         f1:2a:c0:e7:89:ac:75:33:af:4e:0b:8d:5b:b7:60:b2:9d:d8:
         8f:7a:f2:39:2f:46:47:2e:01:f5:3f:e7:71:b5:ab:cc:f4:e6:
         29:13:3e:74:42:43:33:94:bf:f0:3a:0f:57:25:e1:44:5c:1b:
         18:cc:30:e4:81:23:95:42:23:b0:54:d5:b1:e9:7b:61:ba:4d:
         76:60:69:55:be:6f:9d:dd:70:6b:6f:13:3c:db:d9:eb:b3:4e:
         1c:5d:9c:d2:e0:cf:f2:e2:9b:54:5c:02:92:12:8a:04:99:f1:
         55:b7:90:87:aa:8a:8e:68:dd:9c:8f:c0:af:d5:6a:1e:43:aa:
         c8:1d:ac:fa:05:e7:06:b0:d6:48:77:53:e3:a2:5c:f0:6f:f5:
         2d:6d:ee:6f:62:08:c2:ba:b4:c0:8b:97:fa:63:3e:30:ba:89:
         c1:74:b3:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:43 2026 by rpki-client