Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa
File:                     3021d954-9e02-3628-92f3-31f119119e7a.roa (raw, json)
Hash identifier:          LxlISysRVETEVl0fppOZQthvxCd1/v/VeHUMg+6SX4E=
Subject key identifier:   52:97:BE:87:F7:A3:A5:27:96:08:18:F8:01:67:E9:D5:49:67:BD:94
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E7634D00BE0604DE0681C8080
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d0:0b:e0:60:4d:e0:68:1c:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=9f663acc-0aad-45c4-be57-3f351adf6f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:0a:f7:86:d0:9c:8e:97:52:fc:70:f6:32:
                    f1:ba:ff:9e:fd:8b:7d:22:54:2c:c4:30:2a:f3:85:
                    8c:ef:a8:07:11:f4:4c:a1:9a:0b:22:56:70:60:64:
                    26:76:ca:4b:ad:57:1d:b2:02:11:00:27:3a:72:1e:
                    2a:20:89:76:cb:0d:23:c3:e3:37:04:e4:b8:63:e0:
                    aa:f9:d5:dc:64:22:bd:49:31:94:6f:8e:6a:89:36:
                    8b:13:eb:e5:10:49:f8:1b:17:ec:e3:a6:72:71:90:
                    93:e8:65:dc:94:f4:e1:86:87:f1:78:e4:1c:a8:09:
                    87:07:e8:8e:eb:d8:0c:d1:31:61:60:70:c2:6c:7d:
                    16:c6:17:eb:4c:77:85:91:48:bc:55:ae:c4:59:0a:
                    df:da:cc:d5:b0:a1:81:bf:25:20:7f:0a:59:5f:39:
                    68:27:dd:7e:e2:43:1e:f8:c7:7f:4f:9d:eb:1a:c8:
                    aa:c3:26:a2:6d:13:e2:04:64:3a:20:4b:fc:ca:36:
                    f3:4b:7d:b7:c7:9c:e5:ea:91:1d:c9:3d:ae:1f:00:
                    b1:b5:41:c6:92:e3:9a:46:d3:86:d8:35:8d:86:85:
                    9e:d3:7b:19:ae:09:76:f0:50:40:78:07:e8:d7:7b:
                    33:99:41:b0:22:23:52:0b:f6:a6:e0:8c:2e:f5:2b:
                    36:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:97:BE:87:F7:A3:A5:27:96:08:18:F8:01:67:E9:D5:49:67:BD:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:46:92:bc:dd:9a:ba:24:c9:20:b1:47:77:6e:90:a8:ce:1d:
         e4:39:a9:77:3d:e7:5f:63:24:9c:17:f1:f2:3e:f9:5d:ff:5c:
         9b:79:81:5c:18:8f:68:85:bc:fe:30:08:d7:0d:ac:55:3c:a8:
         4a:2a:b0:36:37:15:9a:e6:ec:17:f3:26:e3:aa:da:39:d7:72:
         80:8d:76:f4:8c:38:6e:c8:f7:bd:0b:97:78:c1:0d:48:7e:80:
         bc:53:de:e1:4b:ff:45:9f:bb:06:c3:a1:5a:e7:76:bb:e2:6d:
         86:5b:2a:7c:e1:cf:d8:47:b5:05:4c:2c:6e:ae:39:5a:97:db:
         93:af:7f:74:06:61:d2:f3:3a:aa:17:8d:f1:13:1a:39:71:e7:
         30:a4:09:74:6a:d7:61:85:25:8d:ce:a0:1c:1d:b8:2d:a5:81:
         55:80:c2:11:f5:e4:a2:fa:e9:7b:27:6b:e3:ca:a2:7d:ca:a3:
         99:d3:94:a7:1f:62:fb:de:28:71:3b:6d:c9:f7:f6:2f:e9:27:
         9c:6e:de:f2:aa:61:af:33:0e:6a:5d:58:5f:07:8e:29:c2:56:
         2b:87:83:d5:a0:10:b2:e7:21:0b:7b:36:3a:b0:87:0f:3f:62:
         b4:f4:dd:c3:bb:25:ad:d1:5a:9a:4c:a6:36:5c:b1:4c:b9:8a:
         ea:0c:a6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:08:44 2026 by rpki-client