Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa
File:                     caf6984a-6241-341c-a03c-38c380834003.roa (raw, json)
Hash identifier:          PZ9bY+6S6F9l4xG0uH4bNUiHrf1kDSkAuLBkGA2R/uA=
Subject key identifier:   8C:78:29:C3:BB:82:92:FD:A4:E3:CC:1D:AE:C8:FF:99:8C:C6:F3:78
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E97B50481EA45CB8588686980
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1065::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:04:81:ea:45:cb:85:88:68:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=928fde51-a50e-4cec-8586-0af2b7b89f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:27:b2:89:aa:be:29:8a:7b:ca:b2:31:d4:
                    c8:52:34:a0:bc:52:17:04:1d:42:f6:fd:5c:5b:46:
                    b3:bc:4f:fc:6c:53:2d:fb:0b:a2:d0:72:8d:3e:e2:
                    12:98:79:75:de:17:0c:40:d1:bb:38:a8:be:9c:bc:
                    a1:9e:03:e8:df:33:52:f4:0d:78:ea:8a:e2:c7:71:
                    e4:d4:9b:99:d3:0b:b0:21:79:35:5a:41:df:6b:cc:
                    6f:17:12:64:a5:22:b0:f4:6a:49:87:59:ba:0e:13:
                    ed:9b:82:0e:ba:69:9b:69:4f:8d:d4:41:29:ca:66:
                    c1:39:5b:77:77:b5:98:3e:5f:23:d5:3f:44:b8:0b:
                    e5:51:a1:34:6a:36:a6:bf:5d:68:f2:3a:d3:d9:ed:
                    54:d1:11:ee:91:82:fa:21:7b:c0:1e:20:bd:84:d1:
                    fd:84:a1:ac:8e:5b:cd:13:c9:a3:08:b2:25:9a:65:
                    56:35:85:ce:76:12:59:09:18:61:97:9e:9f:9c:fe:
                    b1:e1:7a:d7:a1:2a:a7:63:9c:8a:0b:f1:1d:90:61:
                    15:2d:11:a4:2a:97:7a:ec:7a:05:67:8f:69:8e:76:
                    68:9a:ad:e4:59:e8:a5:9b:8d:b5:f6:0d:9c:40:88:
                    03:69:2d:66:a5:25:1a:8e:4f:cc:02:f3:c3:ae:02:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:78:29:C3:BB:82:92:FD:A4:E3:CC:1D:AE:C8:FF:99:8C:C6:F3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:0a:6d:8b:12:e3:2a:ad:f8:b4:e4:1d:91:97:e4:45:87:
         52:a6:e1:b2:34:9e:d9:41:2f:2c:a5:6b:1b:ad:df:f7:6d:0f:
         9c:29:d9:e8:d9:b1:0b:f5:12:51:8e:91:3c:ff:9c:22:ed:65:
         0f:7a:df:2a:83:06:a9:93:31:8c:1b:bd:36:eb:57:19:3a:66:
         86:c0:75:aa:9e:bb:ad:a5:dc:19:1a:67:b8:62:a3:64:76:8f:
         2a:ce:9d:18:6b:5a:2b:79:f8:bb:e2:25:31:d2:ff:2e:45:12:
         87:36:40:20:db:7e:9b:32:94:2c:b3:7c:af:7c:dd:f0:b2:39:
         0a:e0:84:3c:43:99:99:92:72:21:39:55:49:89:fe:ae:35:b4:
         56:0a:21:8f:c9:05:da:81:9c:2b:b9:8a:e0:5e:8c:80:77:0b:
         f1:d8:40:02:e7:84:9c:9e:74:98:02:a6:4e:e3:82:46:2d:38:
         f5:8c:aa:c6:a3:64:d1:3e:d7:26:b2:d5:a4:e1:1c:03:5d:cb:
         cd:44:62:bc:0c:b5:6d:ec:eb:23:14:eb:84:54:f0:6e:6d:75:
         65:68:af:0d:fa:eb:04:38:94:a6:10:41:55:69:96:0a:01:b1:
         2e:09:fe:87:9f:8c:3c:fd:32:bc:89:31:5e:19:3c:38:1c:13:
         b8:36:fb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:53 2026 by rpki-client