Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa
File:                     bc97280e-58ac-34bd-b6b0-31818047edb3.roa (raw, json)
Hash identifier:          9u5rTmhQzy48M2V9765dLCPElgKyKmso0e8g+ytE45s=
Subject key identifier:   57:0E:30:5D:8A:5C:7E:F9:D6:1C:B0:D5:B2:68:D0:6A:56:32:6D:05
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584E90BA4CBACA7E57FB7F3BD0A0
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     53727
IP address blocks:        2602:f982:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4c:ba:ca:7e:57:fb:7f:3b:d0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=557b3e7c-f6ff-46f9-a1d5-9d0649f74876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:2a:39:bb:43:3b:ed:af:e4:f0:86:05:49:
                    1e:71:b1:46:62:49:ac:f7:40:ec:34:4b:fd:b2:61:
                    3e:91:06:91:eb:5e:fe:89:58:a4:e5:62:75:28:9b:
                    6a:b3:57:75:a5:3d:6a:8b:b9:c5:da:e3:e1:08:d2:
                    d0:13:3f:53:35:75:f1:3c:c3:8e:0c:c0:52:92:01:
                    08:3b:8c:cf:6f:5e:ed:63:3f:79:23:53:0d:13:a1:
                    b0:45:e0:e0:b1:47:71:8b:73:ed:c4:79:d4:06:de:
                    39:1e:0b:52:28:b7:94:0d:61:aa:5e:9c:90:97:7f:
                    0f:8b:c1:18:dd:05:c9:e3:c3:ec:c3:f2:e0:17:ac:
                    38:69:58:49:28:61:ad:6e:84:04:9c:38:6f:e5:0b:
                    ba:50:f9:bd:b2:f4:dc:bf:b4:11:86:a8:d4:31:c4:
                    7d:40:5b:83:34:66:dd:13:af:43:74:1d:5d:b6:b6:
                    60:d9:d0:b6:86:f6:00:6a:e1:5d:26:a0:2e:ae:51:
                    f8:97:ed:80:59:c8:a2:64:46:4e:db:8a:53:be:1e:
                    71:a2:97:11:f8:02:86:43:78:38:71:c8:75:0b:a8:
                    23:ff:67:00:43:36:9e:3f:cf:71:23:9a:50:fb:51:
                    c9:bb:fb:68:c4:04:66:71:65:a3:65:6f:62:ab:fa:
                    4d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0E:30:5D:8A:5C:7E:F9:D6:1C:B0:D5:B2:68:D0:6A:56:32:6D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0f:c1:54:4e:4e:37:00:ac:4f:5a:76:ed:f5:c0:4a:a0:14:
         47:ba:79:9d:a0:f0:ed:5f:d5:aa:d3:95:6c:39:34:9a:ef:08:
         65:28:44:c5:9a:c7:de:e1:d3:30:bd:93:38:df:4c:76:e9:99:
         f7:f7:66:48:da:f9:51:0f:17:be:5f:6b:b9:85:78:f5:c0:10:
         27:67:02:56:9e:c9:6d:f1:f9:8f:0c:92:c6:33:1d:f4:e5:1e:
         50:f2:0a:36:3d:32:41:02:04:e6:98:e8:1a:76:63:90:6c:0e:
         c0:60:cb:6e:c0:17:27:b9:f2:dd:34:cd:0c:e5:5a:62:c1:98:
         52:83:3a:fd:91:6b:e7:22:c0:67:cb:02:97:17:a5:42:92:53:
         e1:db:99:24:e0:94:53:d9:d1:43:88:d1:41:fc:b0:99:b2:bf:
         b4:fa:88:c5:aa:c0:62:de:c3:fd:51:93:b0:6b:ba:83:2f:34:
         94:2c:95:cd:1a:fa:6b:6f:a5:19:05:0f:1f:77:39:df:b2:e4:
         21:ac:08:0a:36:f8:15:c5:b0:0b:27:35:7e:9b:f4:e2:7a:13:
         a5:18:13:0a:8c:5c:c2:7b:16:c5:bc:e0:02:99:ee:c0:44:ab:
         c9:26:9e:a6:bd:5a:d9:48:18:1e:ce:7a:69:5b:2e:3b:78:a5:
         14:c0:3d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:58:47 2026 by rpki-client