Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa
File:                     1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa (raw, json)
Hash identifier:          U2y2HqvS6tBDaKthJqcNpvOOKDfo5khIWM81SuttoHo=
Subject key identifier:   FA:E2:FF:B3:64:D4:DB:E5:3C:1B:30:57:C0:8D:14:FD:7A:63:05:9E
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584E7204D49E28856746AFDE9C90
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     398813
IP address blocks:        2607:2240:5000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d4:9e:28:85:67:46:af:de:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=b9136d81-9c90-4f93-a03b-0e82b0c1da1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f3:0f:9c:30:07:7a:52:ec:89:0a:28:65:67:
                    f1:8f:e0:21:ce:35:73:9a:dd:86:26:2f:2e:fe:d6:
                    14:a1:15:51:68:b4:0e:82:df:70:97:1e:a3:32:e1:
                    fd:6b:23:a3:89:e3:1a:2f:c0:9c:6d:26:df:14:94:
                    2b:90:29:57:2e:ef:36:81:68:d5:e5:28:fc:74:87:
                    e5:a6:12:82:00:f1:c3:e8:ac:37:cc:b7:12:38:e7:
                    97:7e:09:fb:7f:ed:61:0f:3c:9c:c4:1b:4b:a5:fd:
                    6d:26:60:a4:0c:c3:d9:d8:cc:2d:6a:12:1b:68:db:
                    23:6c:3a:68:70:f9:d3:d3:4a:5f:6b:e0:6b:81:a4:
                    6c:35:0d:cb:b1:85:f1:3d:8f:2d:7e:b2:b7:0b:db:
                    0e:0d:98:87:a7:0f:24:8a:13:f8:0e:52:ec:59:ac:
                    b3:45:bc:09:be:33:1d:0a:4b:90:72:63:14:c1:0f:
                    bf:c7:a7:e0:bb:72:62:1a:a0:42:21:f8:4c:68:0b:
                    12:df:17:5d:f9:89:3c:76:fc:31:3c:6a:9c:2f:a1:
                    41:a1:71:d4:24:ca:f8:e6:68:97:0c:85:00:63:6d:
                    17:9c:56:38:9b:50:38:54:51:d8:a2:4c:70:42:d0:
                    51:f6:e0:77:f0:e3:8b:6c:77:c6:f0:ec:cc:a5:bd:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E2:FF:B3:64:D4:DB:E5:3C:1B:30:57:C0:8D:14:FD:7A:63:05:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:2e:5d:32:6e:eb:f2:6a:29:45:94:f9:86:71:b4:6d:71:
         21:a2:93:b4:7a:24:54:cd:20:61:60:4a:04:25:0a:91:d5:4d:
         1e:5f:22:ed:a9:46:cb:94:11:88:c0:08:88:8d:11:aa:1d:67:
         b5:1e:05:59:79:87:8a:e8:4d:c6:7a:58:3b:81:41:01:e3:df:
         0c:d1:27:17:1b:81:41:42:b5:61:ba:3d:46:d9:fd:f5:99:20:
         c7:7d:93:b6:3b:a0:22:12:0f:be:7d:ab:dc:eb:f0:53:53:f8:
         9f:db:22:32:91:87:3b:92:07:99:6b:34:13:2b:d4:44:39:ec:
         76:1b:2b:a7:2c:70:1a:42:0e:d0:7c:85:81:20:d3:73:45:a4:
         90:ce:de:d2:c9:ff:9f:bf:4d:1d:be:08:a3:5c:b9:d4:dd:71:
         47:46:a6:c4:b2:63:19:66:22:67:cd:6f:75:69:a5:84:a5:5e:
         21:ee:fd:20:37:29:b7:3f:8a:4a:3d:78:1f:3e:a1:44:bb:92:
         e0:fe:19:44:98:42:29:1d:c7:3a:e3:69:e2:70:11:3b:ea:84:
         5c:68:74:1a:df:97:b6:d7:c9:13:35:da:68:9d:c3:72:b5:91:
         09:c0:54:74:a6:5d:f8:ca:aa:e7:46:53:74:1f:0d:27:fa:70:
         33:75:d3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:59 2026 by rpki-client