Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
File:                     b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa (raw, json)
Hash identifier:          WyUYlam00EOsyJdIPC3uWALHA2QHFwqn+/CTt/Qt2BM=
Subject key identifier:   11:9E:DE:D8:97:50:A1:C6:04:24:77:3E:71:7E:FB:7F:06:DA:A0:7D
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584D95EFF4D8038DC6B21CB17C00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f4:d8:03:8d:c6:b2:1c:b1:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=7af3cdb4-4bdf-44ac-afbc-9a6721a1cb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:ea:fa:6d:9c:8b:19:e9:f6:4f:9b:f6:c9:
                    bf:9a:34:ba:56:1b:92:73:00:a3:62:e2:b2:fe:e3:
                    00:14:1b:97:00:70:9f:2d:2c:39:e9:8d:6d:44:57:
                    5c:55:9c:52:c9:d9:a0:48:55:eb:28:2c:9f:0a:db:
                    2f:69:a4:b1:1c:45:fd:93:26:a3:4c:25:5f:51:d0:
                    5f:d4:d5:77:9f:2d:79:02:6f:d0:29:0f:91:de:82:
                    d4:75:55:a7:4f:f9:75:19:2f:50:f4:4a:a1:bc:07:
                    50:ee:ed:0d:92:e4:81:c0:de:4c:7e:9c:46:78:2a:
                    21:d6:74:2c:7c:ad:45:ad:7e:1c:cd:63:07:da:b6:
                    85:c5:d8:43:7c:ed:e2:d6:e1:1e:2f:39:f5:5d:d8:
                    e7:b1:fb:51:19:3f:9f:6d:91:d7:74:35:3a:4e:9d:
                    93:d2:82:1c:2b:66:79:7d:0e:81:40:f4:e0:2a:c9:
                    3b:5a:25:10:4e:dc:57:b9:d9:2b:3d:45:8d:fc:ac:
                    b6:94:15:9c:1a:ed:5d:bd:9b:78:25:b7:9e:5d:ee:
                    67:5b:82:17:b4:1a:05:7d:bf:a4:74:27:66:76:f3:
                    bc:5f:ad:36:83:de:d9:66:3d:bf:54:93:4f:fe:e2:
                    83:bf:34:41:85:59:81:c5:80:b9:94:87:69:0b:b0:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:DE:D8:97:50:A1:C6:04:24:77:3E:71:7E:FB:7F:06:DA:A0:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:40:bc:f6:e5:53:7a:90:6d:3a:c6:62:eb:3d:80:98:a2:89:
         af:f3:44:99:6a:10:0e:19:4b:fa:ff:0a:27:73:92:f0:66:bd:
         c6:38:bb:90:2f:82:47:69:3c:81:1b:81:1c:f4:f8:33:06:ec:
         e6:c7:3d:1e:1b:9d:12:5e:65:96:15:54:84:d1:46:12:44:27:
         5e:a8:5a:fc:ad:78:67:5d:01:6a:ee:b7:c8:29:a7:92:9b:57:
         91:cc:d0:17:7e:53:84:05:cd:64:da:2e:69:79:19:a2:84:bd:
         e5:09:6f:e8:7d:34:96:77:62:62:79:7d:41:1e:e6:94:f8:7a:
         0a:f3:e7:c2:95:e3:a3:6c:8e:c1:17:f6:72:50:cb:74:f0:a9:
         8f:a7:18:dd:62:bb:31:ff:72:fb:39:dd:e3:96:61:4b:a3:75:
         ad:43:b4:87:eb:8f:67:e1:7c:b4:a8:98:1e:0a:b1:27:92:6b:
         14:a3:75:61:3a:3f:5f:74:75:df:c1:fc:52:ea:dd:18:c9:eb:
         78:af:29:20:68:66:a6:ed:9a:95:b7:9a:88:b5:64:02:46:cd:
         ab:42:5a:1a:b2:4d:c0:de:35:bf:1a:ba:00:37:2f:10:30:a1:
         2e:41:2b:8d:58:72:04:77:f4:7e:0a:15:5f:8c:46:98:79:4c:
         e3:34:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:23 2026 by rpki-client