Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
File:                     b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa (raw, json)
Hash identifier:          I/zJ+THRO0+owmDJKXc9eLZR2UrSD0s46hf6dL0YVBE=
Subject key identifier:   01:13:89:7D:FB:AE:31:95:B4:CD:6B:84:40:64:35:84:FA:2A:C0:D2
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E7634CFF485057C82BF1B3886
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:cf:f4:85:05:7c:82:bf:1b:38:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=ec7d092a-038f-4f7d-bb25-be9a74dd5da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:6a:e3:7f:0b:1a:d3:5b:a8:8b:6e:dd:37:
                    1b:2c:5e:d1:c1:a7:b5:4d:28:d8:97:33:15:a4:c2:
                    75:61:11:52:37:02:fd:6d:ad:9d:8d:59:06:51:e6:
                    67:a4:6b:8e:6d:0f:47:3f:0e:c2:8e:de:68:78:39:
                    91:58:e3:f6:92:79:3a:a6:e3:4c:a1:eb:03:84:4e:
                    66:85:a4:d0:32:18:67:b8:e2:35:d0:f5:40:38:52:
                    c8:58:ba:df:42:2f:63:47:55:9e:2c:c6:8b:ee:a9:
                    ef:9f:b9:e9:26:c2:24:05:a0:00:ea:5d:29:ad:da:
                    25:d7:18:1e:cc:58:a8:e7:8a:b2:07:39:34:65:47:
                    78:f7:d4:63:86:f2:82:b7:fe:bb:43:dd:da:fa:cf:
                    c4:40:92:b2:1a:3e:c6:37:9b:1e:1e:b3:c9:c0:d7:
                    49:13:8b:41:f7:21:73:9a:f9:7d:db:cc:2b:1b:fb:
                    3c:3d:01:9c:f2:26:a7:05:60:50:e4:10:89:14:be:
                    0a:01:ce:6f:04:0e:c7:50:93:00:28:81:91:75:a6:
                    44:11:60:68:d9:20:3d:ad:f2:1d:d4:9b:95:38:e5:
                    3a:24:82:fe:a9:28:b8:9d:03:99:9e:8c:97:08:27:
                    00:b8:1b:7e:13:be:80:64:f7:e4:83:74:6e:f6:fc:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:13:89:7D:FB:AE:31:95:B4:CD:6B:84:40:64:35:84:FA:2A:C0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c0:12:3b:a9:63:c1:c4:2a:ea:3b:41:b4:c6:8b:76:b4:5d:
         ee:f0:97:ae:f5:a3:9f:46:37:9e:5b:a8:ef:c1:b9:24:d6:1f:
         3c:22:0b:11:9a:11:c7:05:e2:0b:7b:d4:f2:c4:9c:78:56:d6:
         ca:d1:b8:96:ee:04:04:98:da:68:49:6a:c3:e7:7c:ec:a4:08:
         7f:1a:33:a1:9a:66:38:d2:02:12:79:84:2f:47:9b:e4:41:9d:
         54:d9:e2:fb:ea:d8:d3:f5:d5:06:ce:9a:51:2f:0b:4a:be:ad:
         b5:f3:50:c7:3c:29:30:d2:d5:20:db:24:f1:9b:2a:0d:44:af:
         30:6e:c5:42:4c:d4:49:30:d1:0d:cf:d2:ca:c1:aa:3c:bf:2b:
         76:3d:41:4d:d8:3d:63:4b:af:e3:6a:b6:39:8d:19:39:ce:cc:
         a3:72:58:2b:9b:88:64:0f:9c:c6:2b:f0:ee:ca:0e:03:d2:15:
         a8:b9:70:06:46:bf:25:ca:fa:45:ca:5b:e6:34:7e:b9:a6:10:
         ef:61:4e:ee:0c:fe:67:16:01:e8:b1:a0:41:4f:cf:00:13:2a:
         2b:08:de:a8:13:20:e8:6e:1b:b4:6a:eb:3d:cd:c6:16:1e:b4:
         71:4e:4e:9b:b4:b5:89:27:f9:e7:9b:4a:da:d9:02:91:9f:7e:
         02:d2:27:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:47:56 2026 by rpki-client