Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/5d721a57-fd56-3961-8243-84e0e51e1459.roa
File:                     5d721a57-fd56-3961-8243-84e0e51e1459.roa (raw, json)
Hash identifier:          5ejox6NpRIp844Gw9DB4ZxbOt8WZNV9M8pTRzyQAE1A=
Subject key identifier:   7E:80:E9:D8:AF:0E:A6:28:82:85:28:DE:30:F8:F9:45:8C:E3:27:99
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F4328584E8DEFA92DE6484092CE307480
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/5d721a57-fd56-3961-8243-84e0e51e1459.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     5788
IP address blocks:        2602:814:70f4::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a9:2d:e6:48:40:92:ce:30:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=4dc58ae8-6a9b-4476-8482-9313be4e2015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:d0:2d:61:5e:f6:1a:95:7e:03:17:35:e5:
                    e6:8d:48:e7:58:ed:40:3b:3d:5d:c2:87:ed:89:53:
                    ca:57:2c:e5:12:79:8b:94:da:46:1b:26:69:ee:5a:
                    5f:ae:35:93:94:54:34:d9:59:e6:ea:de:c1:27:4c:
                    a6:3d:f0:09:f6:47:9a:40:20:de:40:c7:58:f5:3b:
                    85:6d:f1:d7:c3:3d:68:69:be:e6:e5:15:c6:60:64:
                    dc:42:c9:5c:87:c8:27:f2:62:5f:97:b4:e6:15:a5:
                    5b:b1:b2:cd:c1:7d:aa:c3:39:9b:0a:03:fa:45:8d:
                    ab:e1:f8:72:1c:94:1b:47:9f:bc:0c:9e:45:75:cf:
                    c1:73:a6:b5:79:8c:52:3b:a2:56:1b:26:78:94:cf:
                    e6:5e:2d:ef:2f:d5:b1:96:a3:cc:2a:50:ac:ca:5e:
                    c1:fe:7a:d1:a4:4b:a3:a0:1c:09:d7:ba:1c:ef:6c:
                    df:f9:47:70:74:fb:98:4e:dd:6f:43:3a:26:f7:ca:
                    b8:aa:73:9a:39:85:a1:c0:5f:30:c9:1d:e6:56:47:
                    d8:a4:17:08:77:5d:0c:59:cb:0e:eb:04:ea:3e:e1:
                    7b:b7:c4:98:78:ae:81:42:35:5e:75:b6:78:d9:8c:
                    8e:25:34:ce:2b:97:e0:5f:27:f6:c1:11:51:f5:c2:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:80:E9:D8:AF:0E:A6:28:82:85:28:DE:30:F8:F9:45:8C:E3:27:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/5d721a57-fd56-3961-8243-84e0e51e1459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:70f4::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:49:c1:3c:4b:fa:30:30:4a:0f:1b:29:a9:86:4d:1f:18:8a:
         53:90:09:fa:81:cd:18:a7:e8:cc:3e:b8:e5:52:68:b6:46:55:
         15:0b:f1:29:3d:f3:d3:e6:38:85:dd:ba:c5:d6:4e:66:b8:77:
         60:00:41:cc:9a:fc:df:4d:a4:82:2e:d0:9b:7c:fe:05:73:3b:
         79:b6:35:f6:ab:2d:52:8e:23:cc:a7:ba:0d:1b:48:5e:f2:0b:
         64:36:4e:25:04:25:94:57:ed:83:2f:40:df:d8:5b:cf:69:f1:
         09:5d:32:6a:d2:a3:92:c7:1c:9d:ca:61:be:39:af:d2:bb:57:
         a3:e2:42:ba:f4:55:3e:b9:0d:18:b4:79:14:03:d1:fd:99:ec:
         32:14:6e:d9:99:2d:3d:18:b7:2e:ff:ff:b8:9d:92:b5:19:a1:
         8b:28:b7:28:36:ac:0c:42:2a:08:aa:fe:3a:5e:d5:db:38:4a:
         ad:34:10:31:22:0e:4a:dd:cb:6a:33:65:b3:96:3b:26:54:5f:
         1e:53:ea:05:c7:17:1a:59:f0:0e:0d:f9:6e:08:76:b3:49:c2:
         3b:c4:12:4a:6b:4b:b6:70:9c:8f:d5:91:1f:dc:5b:58:cd:bb:
         89:3c:6a:14:25:fc:39:c7:41:44:e0:3b:df:36:0c:68:fa:21:
         27:b4:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:42 2026 by rpki-client