Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa
File:                     38a03247-5407-3471-a614-36ff41fe4307.roa (raw, json)
Hash identifier:          9bDI9T3vwEvS2YhxVTPgRg4Stl9G5CYetLem+ySnP2s=
Subject key identifier:   0C:61:B0:96:C8:2A:63:4B:07:6E:EC:06:D2:30:24:EA:19:21:7C:DE
Certificate issuer:       /CN=ae459c49-adf3-48bc-a738-d940977d540e
Certificate serial:       010D0C9F4328584E86F4EB0E1DA7AC1780CA7600
Authority key identifier: B0:EE:30:31:4D:E8:13:5D:9C:4F:5E:D2:43:AD:D1:57:EC:32:5D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     21976
IP address blocks:        2620:3a:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/ae459c49-adf3-48bc-a738-d940977d540e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/ae459c49-adf3-48bc-a738-d940977d540e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:eb:0e:1d:a7:ac:17:80:ca:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae459c49-adf3-48bc-a738-d940977d540e
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=d03402ac-d7df-478d-ba1d-749516488133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e9:f7:94:9e:60:f4:f1:94:2c:db:d8:8a:09:
                    7e:cd:20:23:f0:52:7b:e1:98:05:d8:19:ff:e3:14:
                    5c:91:7d:d5:7e:f2:58:52:ac:05:c4:5c:37:cc:08:
                    e3:db:57:8d:d4:2d:64:7d:4d:97:be:46:c4:08:4e:
                    74:82:7d:02:9d:25:e4:c8:20:9d:b8:ec:6f:de:68:
                    c4:37:e6:ec:b4:c9:f0:91:95:2b:8f:00:c7:a2:4c:
                    a9:8e:b0:61:7d:92:71:9f:5b:e3:54:d6:19:ae:f0:
                    68:3e:cb:91:ef:21:b1:ce:57:89:dd:30:ad:cf:45:
                    d4:23:50:9e:1e:84:b5:d7:94:09:75:38:c9:e4:7c:
                    b7:c7:ac:52:ba:5f:2f:b2:fd:76:17:29:24:f4:aa:
                    e5:a1:bb:3a:89:dd:01:f7:98:0d:61:e8:2f:6e:21:
                    89:c2:37:b1:d5:45:34:22:c0:9a:e0:6b:77:3f:9f:
                    fb:e7:aa:e1:24:7d:13:ce:a7:34:07:07:c7:68:ec:
                    ab:c4:9d:b2:f0:74:e9:82:7b:c7:e2:60:46:f0:ea:
                    3c:bf:2b:13:de:46:5a:37:33:ce:63:31:b3:18:b4:
                    63:6c:49:69:cf:f4:d0:51:58:51:b8:cf:2c:f6:8d:
                    b2:2d:3e:71:c9:7f:5e:e3:01:c7:0e:32:b4:a4:f3:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:61:B0:96:C8:2A:63:4B:07:6E:EC:06:D2:30:24:EA:19:21:7C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/ae459c49-adf3-48bc-a738-d940977d540e.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EE:30:31:4D:E8:13:5D:9C:4F:5E:D2:43:AD:D1:57:EC:32:5D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:3a:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:21:f4:77:52:97:9d:26:73:f1:64:62:71:23:17:78:61:
         c0:a9:b3:b3:f4:74:3b:1f:34:0c:85:23:e0:e2:08:6e:4d:bc:
         68:a5:38:0b:c5:e8:8a:5c:9d:07:ee:1e:68:75:92:36:b0:ad:
         a2:74:d4:7f:9c:32:3c:f9:70:cd:e0:d6:70:56:2b:16:b2:25:
         90:9b:12:da:24:62:d0:ba:35:6b:ed:27:64:8b:f7:e9:e1:0f:
         12:43:13:fb:68:11:56:df:13:ba:44:d4:27:4f:fa:75:a6:a3:
         c4:c1:34:8b:a0:81:af:b3:2e:de:62:b5:87:45:b0:9c:a3:e9:
         d2:f9:27:5f:13:38:7a:d3:ba:93:30:b4:c5:84:e3:a0:88:f3:
         e5:16:9a:55:30:fd:93:81:e2:a2:ad:ec:1b:f9:9c:a8:50:92:
         38:67:f9:1c:23:9c:05:d9:67:16:7e:da:73:6d:1b:e9:9e:42:
         17:d8:62:90:a0:bc:d5:76:f5:45:b0:78:5b:c0:b4:19:e9:12:
         5f:11:81:ec:7b:b2:d5:12:78:bf:ec:cb:09:39:77:89:74:8d:
         6b:2f:fa:f8:0d:e4:93:ed:3a:62:21:74:b9:46:00:f0:cd:7d:
         0c:e2:a7:4d:cc:15:c6:fa:cc:85:a8:d1:36:ed:96:84:6b:7c:
         05:9c:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:53 2026 by rpki-client