Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5d44cf3e-1945-30cb-b0d8-7d68de415254.roa
File:                     5d44cf3e-1945-30cb-b0d8-7d68de415254.roa (raw, json)
Hash identifier:          6uAsFy1c5FRpQxAvFFcW3ljDb4h6RxKflblgxVGPFZ0=
Subject key identifier:   20:FB:EC:E8:8F:A6:81:AF:35:68:93:3A:75:12:DC:63:51:95:89:0C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584E7BCA28E616B5AB83C93FA780
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5d44cf3e-1945-30cb-b0d8-7d68de415254.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     22652
IP address blocks:        2607:fad8:120d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:28:e6:16:b5:ab:83:c9:3f:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=5df37f8a-1a34-4693-ad3b-71f5a0f9aa7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:53:40:09:46:22:84:70:d6:21:1c:c3:b6:
                    5a:19:b6:58:66:7f:60:0d:27:0a:57:0e:8c:52:2b:
                    30:91:e3:78:6a:46:e6:a4:cf:84:7a:66:ff:a1:6e:
                    ed:60:2a:10:9f:ba:c1:1a:25:c5:a3:06:8e:f5:da:
                    3b:e2:65:d2:d8:03:14:31:90:47:01:84:f3:b3:78:
                    ff:92:93:ab:8f:23:33:cf:36:b5:49:f2:57:fb:73:
                    a6:5d:15:59:a0:73:9d:8a:11:c1:bb:11:19:68:36:
                    db:9e:4c:c3:1b:77:4e:d9:2f:25:4d:79:0f:30:f5:
                    2d:27:29:27:0d:a6:7f:1d:1a:bf:bc:21:b1:e3:7d:
                    c1:71:d1:32:86:4e:01:86:56:95:37:87:f3:16:87:
                    6d:bd:03:d5:52:b4:05:fc:0c:01:20:f8:11:52:29:
                    1a:35:61:f1:67:0a:3b:2b:12:e6:30:19:f3:9b:d9:
                    01:16:de:15:7b:32:8f:9c:16:e9:0f:b9:08:92:47:
                    79:ed:16:29:a7:44:2b:92:31:74:a9:5f:b0:ff:2e:
                    fe:44:8e:99:7d:27:2e:08:f4:0a:58:06:4d:17:20:
                    8d:bf:94:18:c3:bb:b6:44:70:02:4d:42:44:94:8a:
                    06:b9:e2:76:76:1b:3b:de:bf:58:03:3d:d0:0b:80:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FB:EC:E8:8F:A6:81:AF:35:68:93:3A:75:12:DC:63:51:95:89:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5d44cf3e-1945-30cb-b0d8-7d68de415254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:120d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:53:77:89:d1:7c:ee:7c:4e:41:36:02:29:ee:35:60:5d:
         6c:a3:d5:da:1d:c5:85:92:54:e0:ca:5a:38:91:3b:0c:68:07:
         cf:22:85:ba:61:74:54:ab:98:fa:a0:b9:80:80:59:22:90:79:
         0a:d4:ac:e7:b7:c5:a1:30:21:30:b1:c6:4f:ff:d1:df:fa:7a:
         4b:c0:30:9f:36:43:83:12:7b:51:df:62:09:b4:53:ed:76:21:
         4f:0b:08:e1:fc:dd:c6:ef:e6:9e:95:31:57:cd:f4:76:97:75:
         fd:19:7d:ae:d1:81:7e:05:6a:12:87:e5:8e:4f:3a:64:02:82:
         ce:aa:16:ec:45:ce:00:2a:57:40:cb:d5:7d:44:c8:10:e0:9f:
         3b:3f:2f:d2:4d:e8:e9:cf:01:d3:53:7a:2c:a2:42:81:a0:db:
         6f:58:ed:b4:1f:92:b5:42:5f:bb:15:ab:ad:c5:8a:32:dd:33:
         ec:7e:d3:43:b3:a1:5b:85:63:95:f9:ca:e3:19:30:b6:46:68:
         b6:c2:3b:11:95:b6:07:f8:a3:ae:6e:0c:27:4e:3d:7a:df:8d:
         64:d8:88:ca:18:51:92:1b:69:b7:26:ee:0e:ba:98:ac:ff:c5:
         81:7b:28:7d:38:d5:a7:cb:0e:2f:3f:44:25:7c:7c:6b:3a:a2:
         03:a1:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:14 2026 by rpki-client