Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/b8db3714-4c26-342a-b31d-1921cbc41b1f.roa
File:                     b8db3714-4c26-342a-b31d-1921cbc41b1f.roa (raw, json)
Hash identifier:          pp6r6GVm+41ulGydl3j1cePT2OZxre2eCAcNCbPL0aI=
Subject key identifier:   9C:FC:3D:D6:48:EB:EE:29:86:E0:B4:47:FD:67:A8:A7:24:75:37:B5
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584E8B24F5F6027330C640CE9680
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/b8db3714-4c26-342a-b31d-1921cbc41b1f.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     393885
IP address blocks:        2604:4a00:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f5:f6:02:73:30:c6:40:ce:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=1bbb50b3-4799-458e-ba41-1fb2e8e5d4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:22:02:ed:bc:36:cd:b9:08:69:fa:1d:76:
                    73:45:bf:48:d8:18:83:b6:2d:51:66:71:15:03:3c:
                    27:de:24:6c:42:2e:ab:b3:a8:3e:15:78:16:f1:fd:
                    58:43:ba:b9:a1:8d:07:45:b3:e8:d3:26:0a:3f:c1:
                    a6:fa:70:68:19:8e:71:b0:57:54:56:6f:49:00:19:
                    99:bf:90:bc:a1:09:73:ba:95:06:72:8a:a0:8a:03:
                    04:c9:9d:60:61:f2:b5:de:2f:c4:d7:24:d5:b8:9b:
                    36:40:e6:77:3d:4f:e1:7f:26:d6:31:30:1b:46:af:
                    6c:f9:fc:ff:86:69:9c:bf:b6:7a:0f:a6:11:98:33:
                    b2:fe:06:42:15:21:5a:ce:e4:d4:51:0b:44:80:ff:
                    c2:59:10:14:ba:ba:da:7c:b0:45:a3:ac:b8:c8:62:
                    57:6c:74:bc:73:b1:5a:bf:e8:51:a4:3a:b8:65:bf:
                    9d:42:0d:0e:ac:71:bb:0a:07:d6:c9:8c:a1:8a:1b:
                    6d:7b:77:26:61:b7:e9:99:69:34:22:25:10:db:24:
                    05:74:12:d0:12:8c:2e:29:e2:34:67:fa:44:7b:e9:
                    58:ea:4e:c2:85:af:5f:80:7b:3f:d7:ad:d9:93:e7:
                    45:c5:89:49:d7:1b:f6:1f:21:02:94:53:d7:bd:60:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FC:3D:D6:48:EB:EE:29:86:E0:B4:47:FD:67:A8:A7:24:75:37:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/b8db3714-4c26-342a-b31d-1921cbc41b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:da:0f:d3:43:b1:f4:e8:a0:62:c0:23:5a:aa:59:c3:5e:
         1d:e0:17:d9:a0:44:df:d5:dd:cf:c0:df:8f:fa:d1:43:13:53:
         1f:f1:1d:53:6f:ba:94:47:5c:d9:06:3e:cb:13:bf:77:f9:95:
         2a:63:2c:97:61:e9:ad:08:d3:d6:95:de:6d:5b:2f:ee:9f:6b:
         f1:98:e3:8a:02:05:b2:a3:b5:e6:f1:51:ba:4b:7b:ae:d4:bb:
         16:40:df:45:3c:7d:5c:a0:89:28:78:8f:bb:3f:50:75:1b:81:
         3d:9c:45:80:c7:76:8c:c3:cf:e5:b4:7c:9a:a6:46:48:79:8f:
         d4:23:80:5a:96:66:5d:83:0f:d7:5a:85:11:c0:00:86:f7:6b:
         46:d4:e3:70:bb:f4:92:13:17:87:bc:db:5d:27:c6:e7:95:95:
         79:b3:ae:3c:8b:91:87:f0:80:02:ce:d2:26:46:6d:e2:70:7d:
         e1:9a:1b:a5:a5:e5:48:7b:18:f8:53:ab:b2:df:64:ac:7d:67:
         e4:89:3e:36:0f:58:9f:d7:3d:44:4d:fa:3a:d8:76:37:d1:66:
         65:af:8b:29:4a:78:5b:10:f4:4b:7b:ac:d3:ee:44:e6:45:c1:
         74:28:22:e6:2c:e3:02:bf:92:c6:a8:fb:54:8b:ad:83:68:95:
         ed:64:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:28 2026 by rpki-client