Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa
File:                     7475f7af-35bc-315c-95d7-5af35bb16110.roa (raw, json)
Hash identifier:          5xN3FitnTjCkaXPNu+eq8XKQ5hS/M8S9A7lGFx+gnlk=
Subject key identifier:   A0:34:FF:37:8A:02:F2:94:FD:1F:7A:56:17:79:40:5F:2E:92:09:D0
Certificate issuer:       /CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
Certificate serial:       010D0C9F4328584E86F4FE733A0BBDD62279BE00
Authority key identifier: 77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     0
IP address blocks:        2001:504:27::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:fe:73:3a:0b:bd:d6:22:79:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=4c7a2b85-5ce6-444b-a99d-57e3deee7b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:89:9a:44:1b:55:a7:ea:0a:ea:23:50:9d:
                    17:d2:c7:f9:50:6e:0d:ec:2b:4c:90:74:95:f6:ba:
                    62:ee:4e:ff:bc:4d:43:02:8a:e2:fd:07:92:1a:e1:
                    c5:db:21:9c:3a:2c:ff:99:5b:dc:97:5b:3e:61:5f:
                    a0:5e:e1:25:5c:f6:bf:0f:2d:7e:24:a2:8f:7a:a0:
                    44:2d:a2:94:16:c0:28:ff:ee:c5:2a:2c:ae:34:1e:
                    9c:6d:6d:5f:51:37:e5:2d:90:50:e7:99:80:89:0b:
                    f2:37:a7:a3:6e:73:9f:16:7c:21:03:0a:91:e6:ee:
                    90:8e:d9:17:71:49:b4:8f:ed:4a:15:f7:15:48:6d:
                    5e:a5:92:97:b2:c0:c7:5b:3d:4d:5b:ff:e7:f9:36:
                    1e:7e:59:98:7e:e7:17:81:1a:76:46:f5:4b:42:9a:
                    c8:37:1b:a5:52:bc:4b:0d:72:1a:13:14:3d:6f:a8:
                    10:69:23:f9:9a:e7:54:97:b8:64:a4:8b:81:61:99:
                    2b:62:70:4b:39:33:75:66:37:0c:4d:f5:3f:aa:7c:
                    eb:09:31:11:ba:78:e1:42:cf:20:8e:aa:ae:27:cd:
                    d7:54:7b:38:c3:ae:a7:f9:b5:3e:e0:95:75:70:5c:
                    22:ae:e5:2f:08:bc:76:ed:d7:93:94:a6:fe:34:4b:
                    2b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:34:FF:37:8A:02:F2:94:FD:1F:7A:56:17:79:40:5F:2E:92:09:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl

            X509v3 Authority Key Identifier:
                keyid:77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:63:37:54:16:ae:93:0d:72:2e:bb:09:26:73:f3:58:ce:f2:
         db:af:e4:a5:60:41:9a:13:aa:ca:39:00:0c:a7:29:a4:ff:34:
         2b:9e:95:fa:dc:7d:cb:75:3c:09:e9:73:59:64:72:54:d2:16:
         8c:cc:1a:6f:6f:3b:12:90:e5:eb:81:68:22:43:f2:6f:a6:f6:
         2e:f1:34:20:8d:30:b9:d1:d8:8f:97:14:70:37:40:88:0a:31:
         32:0c:0c:00:72:20:32:0a:84:8e:26:d6:8c:46:6d:04:33:ed:
         56:4a:f0:92:a8:db:ac:2d:4b:c2:2c:c7:e4:35:e7:f0:65:fc:
         59:c5:66:c0:76:9b:76:93:8d:05:91:13:77:37:60:16:d3:65:
         a6:f8:73:f2:f5:9c:71:13:46:c1:e7:8a:9e:16:de:54:57:14:
         0f:4f:2b:95:57:b6:8d:f2:01:78:9f:23:6f:48:4c:a4:0d:e6:
         ad:8f:b8:44:fb:87:3b:65:f4:70:36:95:84:ee:3c:cf:9d:ba:
         d5:2e:93:5f:52:a0:2e:8b:de:67:14:c6:2e:db:89:eb:a5:0a:
         63:15:cb:73:68:ea:70:70:87:56:2a:3c:24:49:a9:26:29:35:
         b5:d3:86:74:64:b1:b6:90:bc:d0:76:19:3a:91:f8:6f:c6:02:
         41:7a:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:00 2026 by rpki-client