Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
File:                     b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa (raw, json)
Hash identifier:          kcfg4DuEe73bBaZhifTLAUgmy7itfDoVbTmo9zruFZk=
Subject key identifier:   97:67:4A:18:1C:8C:D8:DD:64:E6:DF:7C:26:52:95:7E:07:48:6A:92
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E7634CE473004B00480DA3FC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:ce:47:30:04:b0:04:80:da:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=a6d3975c-6a5f-4023-8aa2-b0dc2aea1fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:44:dc:b9:4f:98:90:c5:7b:eb:2a:8e:3f:
                    2c:b7:59:85:15:77:7c:ed:41:7d:5d:b3:ca:1a:00:
                    a5:cb:47:f0:7e:8e:57:e1:68:c3:92:29:f8:34:16:
                    c5:3f:53:e1:96:f5:28:fd:1f:4f:36:af:fd:fe:9c:
                    9d:57:e4:98:2d:00:2d:da:07:a7:a4:1d:4a:b8:eb:
                    88:4e:a8:10:a8:1a:4a:00:9d:3a:17:64:ec:6e:16:
                    1b:57:96:c5:54:41:a9:3a:73:fa:1a:fb:70:1b:1a:
                    9e:a8:a4:eb:d9:6c:2b:0c:33:94:45:7d:47:65:d3:
                    61:59:0f:3d:98:59:44:c7:cc:70:0a:28:b7:0a:d9:
                    0c:65:c6:49:82:3c:37:b0:ab:8b:88:ed:0d:d7:13:
                    9e:7b:8b:e1:46:88:55:b0:39:4e:35:bb:79:76:f1:
                    b2:58:6f:83:e5:d9:25:99:6a:75:42:0b:7f:73:0f:
                    42:fd:28:fd:88:27:13:49:b3:da:a8:7a:27:bf:4d:
                    25:7f:be:50:ee:d1:fc:a0:07:ba:cd:99:70:23:95:
                    35:9a:04:14:12:25:28:5a:36:18:fe:a7:05:43:bf:
                    b0:7b:65:27:c2:fb:d5:c0:0b:ee:76:fd:26:90:55:
                    8f:58:41:19:d4:7e:56:f9:cc:d6:d6:a5:c9:bc:57:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:67:4A:18:1C:8C:D8:DD:64:E6:DF:7C:26:52:95:7E:07:48:6A:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:07:b3:eb:c1:d1:db:c7:bf:33:2f:e6:60:7f:7b:4e:e8:e3:
         e7:96:b0:95:20:d0:6e:f0:9b:35:8e:c5:fe:48:94:51:3f:09:
         ae:a4:6a:be:07:02:b7:41:07:55:64:35:49:5c:a2:9d:f7:11:
         cd:e4:79:d4:80:b0:47:36:e0:25:7f:69:18:9c:30:b9:14:42:
         a9:b0:b5:87:f0:a3:d4:af:dd:16:eb:7a:c8:5e:8c:d9:30:a2:
         6b:52:88:e8:65:4f:f1:23:b2:35:d4:55:c0:3f:9b:19:d1:81:
         90:a7:d0:c7:85:c2:0a:e5:01:6d:00:f7:9e:ff:9a:ca:aa:1b:
         2a:21:2c:8f:98:fb:eb:27:14:83:00:e9:b2:04:0d:bc:46:b4:
         8b:35:b8:93:43:d3:f2:6e:9a:87:32:05:ed:72:02:8f:83:b5:
         5a:22:f4:9e:35:8c:10:90:2d:19:24:b0:40:59:af:25:5e:84:
         91:a5:40:af:4a:30:5d:41:7a:f1:b0:20:c5:6e:36:7e:84:ab:
         49:b9:b4:bc:ef:b3:66:ce:80:d2:90:0c:4d:3e:9c:8e:3a:24:
         c3:89:bd:05:01:3e:76:e3:4e:d5:f6:d3:68:ea:8f:7a:ba:a0:
         dd:54:3a:40:9d:c7:9f:f5:d2:4d:4a:16:d4:d4:9c:04:de:0e:
         fe:d3:61:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:16 2026 by rpki-client