Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/091b4ff1-98c2-334c-bbeb-478f25c0b18c.roa
File:                     091b4ff1-98c2-334c-bbeb-478f25c0b18c.roa (raw, json)
Hash identifier:          AG3FsJW6zyNNozMh/A3e6mljrkZ4PvM12lSv7NMwsw8=
Subject key identifier:   45:CE:3C:63:1A:9B:8C:FB:2C:94:8A:6D:F0:10:56:6D:0D:CB:9A:68
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584E960CD4E8F909F3661E91CE00
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/091b4ff1-98c2-334c-bbeb-478f25c0b18c.roa
Signing time:             Wed 22 Jul 2026 18:45:37 +0000
ROA not before:           Wed 22 Jul 2026 18:45:37 +0000
ROA not after:            Tue 20 Oct 2026 18:45:37 +0000
asID:                     7352
IP address blocks:        2604:cd00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:96:0c:d4:e8:f9:09:f3:66:1e:91:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Jul 22 18:45:37 2026 GMT
            Not After : Oct 20 18:45:37 2026 GMT
        Subject: CN=20c55102-6d40-4738-b086-a6dbc96dccba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3c:85:1f:6e:d6:07:e8:86:9e:5c:6d:6a:c5:
                    cc:4e:ef:8e:59:d7:cc:f8:1e:44:71:a1:6e:18:cd:
                    3f:8a:e9:ab:57:68:c8:a3:67:13:b6:a2:9c:4f:0c:
                    98:78:f8:37:90:ae:f3:83:67:37:64:62:65:85:2e:
                    34:79:0d:11:38:9c:57:df:68:66:19:dd:97:0e:9f:
                    47:d0:b0:6e:a6:6d:5c:fa:e7:75:10:4c:53:95:2e:
                    8e:75:6e:59:f9:c5:b6:52:51:1b:6d:f0:d6:b0:30:
                    05:54:2d:d1:c2:c7:d8:02:4a:00:63:c7:09:ea:e7:
                    29:5c:1e:fd:57:c6:95:12:b4:29:fe:da:1b:1e:58:
                    85:8b:f7:b8:3c:16:a7:20:ed:55:2e:7b:4f:1d:17:
                    e7:e9:d5:fa:a6:1a:62:3c:27:21:b0:88:5e:ef:a8:
                    ca:d4:79:89:12:93:b8:0f:56:cc:dc:b1:9a:46:c6:
                    f5:8e:cb:f0:fc:c7:74:2b:08:2f:68:19:07:1e:96:
                    6c:5d:d3:c6:34:83:69:32:3b:bf:da:5b:c4:31:2c:
                    f6:8b:51:e4:40:bf:a7:15:46:b7:67:99:8e:e5:03:
                    10:54:42:75:e9:a9:a6:ff:eb:49:bd:f8:ae:e6:a2:
                    3f:e8:b4:28:ea:6a:62:f5:37:24:cd:d2:3c:da:92:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:3C:63:1A:9B:8C:FB:2C:94:8A:6D:F0:10:56:6D:0D:CB:9A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/091b4ff1-98c2-334c-bbeb-478f25c0b18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cd00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:64:8b:60:0c:92:09:b6:fe:39:38:3c:3d:02:8a:e4:1e:
         cf:bb:11:e7:57:9f:f1:43:35:b6:61:8b:95:f2:06:5f:e8:c8:
         b0:ff:9d:fd:ec:94:37:b8:00:5b:48:a6:95:99:c3:22:6d:0f:
         ff:a6:8f:a0:b8:22:8d:2d:33:fc:69:36:83:36:18:88:cf:a0:
         ef:33:ed:86:20:d9:c2:74:3e:db:03:ac:07:68:c6:88:68:cd:
         fe:6b:c4:06:12:e7:80:ca:82:d2:e8:bb:28:08:e6:7e:81:10:
         ed:1d:46:2f:f6:2e:bc:6c:65:e4:c0:14:e3:35:8a:0b:20:7c:
         3f:fc:85:e3:42:91:6e:d3:0d:c0:d4:ca:03:3b:8c:3c:eb:4c:
         ac:f2:48:e1:d5:3c:de:09:23:97:b6:93:62:9d:56:d7:d2:13:
         2f:e5:29:07:9b:c2:7a:c0:e5:6b:96:2a:4e:90:86:a0:20:c4:
         9f:da:56:01:7e:50:d9:b2:54:9f:ae:26:98:3a:9b:e7:74:c6:
         8c:86:66:c5:fd:10:75:99:a7:0e:44:c9:30:65:14:b1:7d:e3:
         81:32:99:ea:5c:f5:a9:62:41:82:c9:71:a7:6f:31:bb:b4:50:
         bd:8c:63:ab:10:8a:42:38:a9:1a:fb:50:26:49:7c:38:62:41:
         c7:80:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:34 2026 by rpki-client