Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/4bbb85c5-3cf1-37f6-8c8d-a75e24f10ca1.roa
File:                     4bbb85c5-3cf1-37f6-8c8d-a75e24f10ca1.roa (raw, json)
Hash identifier:          Lh9m2p9dfd4fjkaS+O3ZuFyo/FM6pk/0wfk1iGcXaY4=
Subject key identifier:   82:A9:2E:0C:E0:DA:97:FA:16:1B:8E:10:14:71:F2:DE:69:0C:F4:63
Certificate issuer:       /CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
Certificate serial:       010D0C9F4328584E90F5B8723912126642186F00
Authority key identifier: 6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/4bbb85c5-3cf1-37f6-8c8d-a75e24f10ca1.roa
Signing time:             Mon 20 Jul 2026 23:00:01 +0000
ROA not before:           Mon 20 Jul 2026 23:00:01 +0000
ROA not after:            Sun 18 Oct 2026 23:00:01 +0000
asID:                     33554
IP address blocks:        2001:4938::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:f5:b8:72:39:12:12:66:42:18:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
        Validity
            Not Before: Jul 20 23:00:01 2026 GMT
            Not After : Oct 18 23:00:01 2026 GMT
        Subject: CN=466ad626-7a3d-49c9-889c-5a966820962b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:64:f8:44:f1:b5:e8:2e:01:2b:94:98:3f:
                    36:88:18:f0:09:13:1e:e4:06:c1:8b:33:b6:65:0f:
                    65:93:e5:6f:ab:70:6a:6b:3e:d1:2b:16:64:52:05:
                    b0:a0:a4:50:2e:e4:b4:dc:9d:85:8b:fb:c9:cb:27:
                    22:92:39:dd:83:ff:e0:35:0e:4c:ca:19:3c:b9:aa:
                    42:82:ea:da:e1:c7:4b:31:04:f2:96:33:a0:c1:b6:
                    45:2a:59:cc:0b:47:74:3e:af:77:89:e8:9c:8e:60:
                    67:cb:5b:93:95:f5:9b:41:cc:88:27:a3:21:9e:fa:
                    ed:ce:c9:cc:cb:ae:33:10:1c:1c:bb:2b:ed:cc:57:
                    0b:94:20:7b:0f:e2:67:4a:34:14:81:00:4c:22:ea:
                    c8:5a:7f:87:07:e7:c4:78:7b:b4:2a:b2:40:96:ba:
                    b9:c5:2d:bb:cc:c2:a6:6b:a3:db:5f:0c:2d:d5:a6:
                    f4:da:73:ca:94:ba:f3:c5:99:8f:b3:24:a0:f3:00:
                    40:33:5c:e1:33:28:e4:31:9b:fb:38:5c:4c:e3:e7:
                    f4:f2:28:f3:48:63:63:a0:2a:ed:65:a0:b3:a7:0c:
                    88:06:91:60:93:c7:7b:22:09:93:58:84:3c:50:c4:
                    ea:a2:d5:88:2b:85:62:01:e0:b4:e6:30:0a:55:3b:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:2E:0C:E0:DA:97:FA:16:1B:8E:10:14:71:F2:DE:69:0C:F4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/4bbb85c5-3cf1-37f6-8c8d-a75e24f10ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl

            X509v3 Authority Key Identifier:
                keyid:6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4938::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:bb:45:13:45:40:0f:1a:ac:51:d7:31:80:85:18:61:44:
         d5:97:c9:ee:c5:35:04:5d:07:f4:bf:76:42:8d:fa:bf:42:9a:
         ec:66:88:db:8b:75:33:e0:79:ac:45:10:0f:69:23:66:82:ef:
         d7:b1:e7:33:9e:a3:38:02:1a:fd:b9:60:db:7c:e0:b1:22:bd:
         4f:2c:fe:97:3e:04:50:ca:06:c4:6e:d0:95:f1:5a:e7:53:af:
         29:fa:f8:85:db:88:a4:53:11:e7:ab:7b:86:0f:0e:ec:e7:e5:
         1a:c8:8f:f0:e4:3d:29:3b:c9:b2:35:14:36:e2:a6:50:14:37:
         3b:1a:3e:71:15:8b:e2:6c:12:a9:8c:6c:67:6c:a7:4a:42:ae:
         5e:46:2a:10:d8:d0:fd:98:ce:c9:ac:94:5c:17:db:cb:02:7c:
         66:ae:4b:e4:eb:8c:37:aa:9b:54:a4:fe:bb:0b:21:a3:4c:a5:
         c4:d9:e1:c8:04:c4:9a:72:4d:6b:f7:c5:5d:94:93:18:49:4b:
         8a:db:83:ac:cf:ab:8b:b6:64:13:5a:93:55:48:28:8b:e2:95:
         e2:71:21:26:13:9a:ab:d7:80:76:5d:1b:3a:c1:fa:03:44:79:
         be:ed:a6:d1:aa:90:05:6b:01:1f:84:7f:35:45:75:46:56:1a:
         57:54:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:38 2026 by rpki-client