Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa
File:                     f420756d-56c5-38ae-8497-eb0829a92be6.roa (raw, json)
Hash identifier:          ub+W4q5A4IvMxVLXXSWWYyGRfJteugAuNs6mWIyoPrk=
Subject key identifier:   05:4D:71:E4:45:B3:FC:B7:80:02:0F:2A:B8:20:90:8A:CF:BC:48:DE
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328584E736A20AFAE5B230CA336E600
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     13780
IP address blocks:        2602:fc09:aa::/48 maxlen: 48
                          2602:fc09:bb::/48 maxlen: 48
                          2602:fc09:cc::/48 maxlen: 48
                          2602:fc09:dd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:20:af:ae:5b:23:0c:a3:36:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=711934ea-e19b-4306-9289-5041ce1dd9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:22:cb:58:8b:c2:e9:c1:7f:dc:09:a2:16:
                    b8:58:49:5a:30:ca:9d:2e:01:7d:c4:04:3e:21:0c:
                    9e:f6:14:d7:c0:65:f5:e6:a4:e2:d3:76:a2:7d:5d:
                    ed:df:1e:e9:b2:20:01:f2:14:98:7f:3b:6a:f2:d7:
                    e1:77:1e:4e:a4:0e:58:7a:44:8b:3e:3d:66:7b:e0:
                    89:0e:68:df:0b:3c:7c:ff:36:8c:b1:cf:26:02:4b:
                    62:01:32:93:08:2d:45:c7:95:5b:e6:c6:da:e1:51:
                    ac:ae:12:91:2a:1a:2a:f8:fa:84:6d:50:c4:d2:72:
                    33:d1:d0:72:f0:50:ac:96:f6:20:de:ca:79:31:5d:
                    d6:41:13:eb:52:00:20:c8:9f:ba:54:f2:31:2d:d6:
                    0b:8a:46:d4:d8:7b:a6:20:3c:63:12:ee:e0:80:57:
                    0b:3a:a8:6f:03:1b:68:15:31:38:21:8d:a2:53:da:
                    f5:9e:0f:79:74:11:d1:ee:3e:c9:6c:4b:52:8f:0d:
                    89:56:c8:79:57:2d:40:71:57:5e:5b:d6:67:8b:ae:
                    e9:92:0b:bc:fd:00:59:95:2c:a1:86:a9:c5:6f:88:
                    77:d8:58:54:5b:d5:d7:8e:54:99:80:86:fa:17:3f:
                    08:d8:01:0e:98:4e:df:76:65:f5:32:64:71:87:9e:
                    a0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4D:71:E4:45:B3:FC:B7:80:02:0F:2A:B8:20:90:8A:CF:BC:48:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:aa::/48
                  2602:fc09:bb::/48
                  2602:fc09:cc::/48
                  2602:fc09:dd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:79:8a:f3:26:28:f4:b8:07:35:d4:f9:bf:47:d4:bd:ee:
         96:15:e2:cb:bb:ac:82:ea:45:9d:f4:f5:a9:98:ee:31:fb:da:
         88:c7:94:af:1c:c4:08:71:27:f8:c4:ba:02:1f:70:7d:89:8c:
         4e:0f:5f:6c:63:c0:00:79:66:0f:ab:1c:19:a0:33:fd:43:0a:
         dc:e8:95:ed:2d:c0:7f:27:9e:80:4d:d7:ba:86:50:18:6c:74:
         3a:d2:3b:78:c8:a3:0b:5b:da:28:1c:c3:3d:ab:ae:3d:97:4e:
         de:5e:f3:cd:f1:06:26:f5:ad:ed:4d:e4:88:a1:aa:d2:23:eb:
         00:c4:1f:99:b0:1e:f0:73:e0:d0:5d:8a:d1:8f:9f:d9:aa:3e:
         3d:ce:e5:91:6d:a4:ef:56:0b:64:10:0d:ec:67:9f:26:4b:7d:
         84:08:35:74:09:3c:f5:81:89:6e:bb:31:13:ea:b5:79:e7:cb:
         e2:a4:96:9b:b5:d9:7c:51:09:7f:6e:29:ce:a8:d7:fc:97:77:
         07:e6:8a:10:b1:68:09:b9:68:17:4d:54:40:5e:e6:cb:14:26:
         45:29:e7:ef:79:f6:6f:2c:d5:de:be:75:1e:f2:8f:9e:2e:84:
         6d:c0:6b:41:66:78:8f:ca:2e:f6:04:48:46:7b:40:9d:5b:6f:
         78:19:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:27 2026 by rpki-client