Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa
File:                     da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa (raw, json)
Hash identifier:          DyB2Q4hqveYzwOMWn+jw7mmiP83wmjoHhKdQTakM9/8=
Subject key identifier:   82:7C:9C:C5:FE:2C:F3:1B:3B:42:0C:D9:1F:E5:09:4D:FC:02:0B:C7
Certificate issuer:       /CN=d87bb806-e83b-438e-bf0b-6c487902c669
Certificate serial:       010D0C9F4328584E5A49F99B4B72D4A80584E300
Authority key identifier: B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     53361
IP address blocks:        2620:d3:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f9:9b:4b:72:d4:a8:05:84:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87bb806-e83b-438e-bf0b-6c487902c669
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=71d08494-46a4-49e6-8ce0-462dec6e200d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:a6:ac:d4:4a:bb:ba:11:83:46:41:5f:34:
                    fa:b2:21:27:29:f8:5f:9e:a9:59:37:fd:22:79:9b:
                    67:d4:16:c0:cf:7f:e9:18:2b:7a:69:8a:45:ca:9d:
                    68:59:51:d5:01:29:80:53:6a:27:56:51:b3:c6:53:
                    b8:f4:d1:ff:08:21:ae:84:a6:cd:ac:81:e2:6f:5f:
                    fa:46:f8:82:25:1c:db:3c:a6:08:a7:1c:66:b2:8c:
                    43:23:74:02:e0:23:54:da:7c:7e:71:65:d0:0f:53:
                    06:46:8f:39:56:07:f5:c6:6f:1f:97:fa:9a:dd:62:
                    ce:bd:6e:8e:06:ac:13:c1:45:5b:cd:30:d2:f3:5e:
                    3d:59:ae:81:dc:0c:c4:e8:a2:91:e2:8c:8b:c1:5f:
                    08:c6:2c:6f:37:95:0c:5e:fa:d4:1d:f8:df:e0:82:
                    05:10:0e:43:cc:77:03:c9:dd:14:55:5d:9a:1d:f7:
                    72:f3:f3:eb:43:cd:0b:4a:55:29:44:46:f7:3d:4b:
                    39:54:8d:8a:8b:43:ee:68:d9:71:9b:cc:a3:36:4a:
                    d8:bb:b7:58:9a:89:ad:eb:cd:fd:22:b4:fa:14:2c:
                    54:11:cf:45:5a:4e:78:25:a3:98:64:1a:73:0b:d9:
                    2d:d0:1c:b9:f6:aa:a9:8e:97:db:7c:21:ad:b8:f2:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7C:9C:C5:FE:2C:F3:1B:3B:42:0C:D9:1F:E5:09:4D:FC:02:0B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl

            X509v3 Authority Key Identifier:
                keyid:B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d3:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:86:f8:94:aa:50:2f:bb:1d:5a:4c:40:dd:ee:21:0e:8c:05:
         87:1a:44:44:da:18:b5:ae:de:8c:58:db:53:2c:bf:d3:57:3a:
         38:10:96:b5:ec:f5:ca:e2:bd:5d:3f:10:12:f7:9d:ce:f1:94:
         85:c5:fd:58:6d:0c:78:c1:2f:1b:f7:d7:9e:c5:13:5e:30:f5:
         ad:5e:de:19:5b:46:56:6f:61:38:97:2b:8d:c5:e6:6d:83:49:
         e1:d5:0a:22:c4:9c:25:9f:f0:5c:7d:bc:5d:a2:74:76:68:fe:
         4c:e0:40:53:39:40:bc:91:be:36:eb:94:c6:76:81:ad:60:3e:
         7d:d5:08:e6:15:7a:4b:11:ad:55:39:8a:5d:ae:53:aa:42:50:
         a8:12:cd:fe:45:2b:d5:76:39:ab:a8:ff:6c:4a:0b:cf:b3:64:
         36:92:a6:e9:c4:6e:b0:20:a8:35:e9:ed:6f:ee:7a:57:de:3d:
         76:b5:d1:6c:84:ae:ab:bd:1c:ca:0c:24:e1:38:a1:6a:51:2d:
         04:e2:0f:fe:56:e7:4f:2f:89:28:1c:ff:21:d9:bd:64:74:47:
         3d:17:57:6c:64:07:f5:a3:8c:92:40:d7:e0:db:be:0c:de:6b:
         8f:f6:0e:b6:56:65:ca:bc:8e:02:11:11:20:4c:16:d8:f2:d6:
         76:64:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:21:39 2026 by rpki-client