Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
File:                     985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa (raw, json)
Hash identifier:          szgH0/I1rmxs5Mdc6F/u61wk1XWNlmXrKTtjIgkV4gQ=
Subject key identifier:   32:4A:B6:91:94:6C:A6:D3:3C:4D:44:1E:D2:19:35:30:D0:73:02:D0
Certificate issuer:       /CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Certificate serial:       010D0C9F4328584E86F4F98E6B8080D069444200
Authority key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     54816
IP address blocks:        2607:67c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f9:8e:6b:80:80:d0:69:44:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=fa8b181c-5095-4952-9b3c-cbfe4c65c49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:34:4f:ab:58:6b:c8:13:7c:30:91:4f:9d:
                    18:dd:1e:96:be:00:78:ec:a8:bd:f1:c5:8a:ad:b1:
                    bd:1d:9c:d6:d9:5a:49:3b:11:14:cc:a1:94:8b:c0:
                    da:1c:3b:e6:0c:8a:ad:7b:40:43:96:3c:5b:3c:29:
                    45:e4:32:c3:86:24:83:ed:2f:74:4d:82:bf:05:0d:
                    4d:ea:ef:39:ee:30:fb:60:97:d2:0c:30:b5:8b:66:
                    95:7c:47:4e:96:6d:fd:4d:e6:b8:96:4a:be:6e:58:
                    76:ec:65:f7:bf:6c:cf:28:31:69:ff:13:78:4b:2c:
                    14:15:3c:8b:e6:d4:b2:85:8b:3b:f7:85:d3:ec:5e:
                    2b:78:7b:9a:6c:f4:48:2d:e2:bf:f5:17:77:b9:c2:
                    d4:42:7b:be:5a:30:0c:f7:50:3b:3c:80:0e:15:f9:
                    02:37:2f:c2:98:69:1c:f2:89:df:5f:5f:45:08:9a:
                    22:4b:0b:b6:d5:58:4f:0a:c3:31:2a:83:2c:83:00:
                    dc:28:1b:00:81:f9:c6:1a:ed:d0:cd:27:2c:1e:73:
                    8d:8e:f6:19:d0:c2:ec:6d:de:13:d2:27:ce:2c:c4:
                    0d:da:ce:47:4d:31:be:f0:71:ed:ca:a4:6a:f4:91:
                    35:9b:82:58:dd:21:82:5a:b8:06:25:3e:34:9d:6a:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:B6:91:94:6C:A6:D3:3C:4D:44:1E:D2:19:35:30:D0:73:02:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:67c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:c1:cc:4d:f4:e9:04:36:b5:46:49:18:b5:f1:4d:cb:eb:
         da:cf:ee:50:a1:8c:c7:46:5f:f1:b4:05:40:e4:3d:8b:5c:66:
         4d:97:37:3d:07:48:c0:37:31:00:7a:eb:99:4d:d9:d3:33:c0:
         7b:04:57:d1:11:5c:61:4c:bf:7d:6c:1a:e3:ca:41:b9:b4:fb:
         92:36:ff:44:1c:51:67:ff:17:44:84:da:f6:ad:74:53:43:9d:
         cf:b6:d3:ef:c5:a6:fc:ed:79:fd:01:86:b5:55:3a:5b:2e:6c:
         6c:eb:a1:2a:85:1c:82:d8:36:df:6b:0e:d7:1a:b2:fb:4b:bc:
         ce:7f:c8:6a:e0:67:9f:15:ec:04:42:f4:7f:53:6a:eb:4b:fe:
         3a:1f:32:09:4f:2d:96:25:c6:51:ff:50:88:c8:37:59:d5:0b:
         9c:63:af:a7:64:03:8d:3e:ad:2c:27:9c:be:51:ee:02:eb:b5:
         98:a7:cf:f5:d1:55:f7:d9:ff:9f:84:8e:be:39:0c:7b:80:25:
         8e:99:e3:33:f4:34:b3:34:a7:1f:88:b3:83:5c:a7:b0:12:23:
         c9:a8:6e:44:ed:65:55:8f:d1:8c:7f:e4:71:b1:6a:44:79:36:
         13:b3:6f:8d:f9:f0:e2:03:10:cc:b3:c1:3f:81:fd:c9:f2:6f:
         d3:88:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:39 2026 by rpki-client