Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/dfaa2096-04b8-3838-abda-5d5f24fb3cf2.roa
File:                     dfaa2096-04b8-3838-abda-5d5f24fb3cf2.roa (raw, json)
Hash identifier:          p90GJX+595UZQn1ExesHAvx3jL3/Bz5R0W7jqw/SoZ4=
Subject key identifier:   8F:1C:28:8B:06:B4:C2:9E:7C:E4:E6:E8:17:DB:46:F3:1A:82:E6:C3
Certificate issuer:       /CN=496749ae-a2a0-4956-9863-7bb09c662ce1
Certificate serial:       010D0C9F4328584E9023CD9733B799283C679820
Authority key identifier: CE:8D:C0:59:CF:90:34:39:7E:8B:EE:0D:2A:8A:16:B0:B4:E8:73:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/dfaa2096-04b8-3838-abda-5d5f24fb3cf2.roa
Signing time:             Mon 20 Jul 2026 15:57:03 +0000
ROA not before:           Mon 20 Jul 2026 15:57:03 +0000
ROA not after:            Sun 18 Oct 2026 15:57:03 +0000
asID:                     54509
IP address blocks:        2604:a5c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/496749ae-a2a0-4956-9863-7bb09c662ce1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/496749ae-a2a0-4956-9863-7bb09c662ce1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:23:cd:97:33:b7:99:28:3c:67:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496749ae-a2a0-4956-9863-7bb09c662ce1
        Validity
            Not Before: Jul 20 15:57:03 2026 GMT
            Not After : Oct 18 15:57:03 2026 GMT
        Subject: CN=18123e48-330b-4923-8ba9-9608802a44dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:53:bd:3d:4a:e4:72:70:fe:36:96:a4:9e:
                    36:89:bb:e6:1e:d1:0d:5b:61:d8:b8:d3:46:8d:a9:
                    4f:66:01:91:26:d6:24:df:c3:c4:86:3c:a6:10:ba:
                    6c:c9:77:b6:1e:c6:6b:87:1e:60:03:1d:17:2f:8c:
                    98:c6:a2:43:a4:93:a3:7d:f7:3b:2a:d7:db:b2:7b:
                    b7:ca:0c:70:93:de:ac:a3:01:67:7a:d2:ee:f3:ec:
                    39:80:c8:82:b7:42:2d:f1:05:45:10:a9:af:1f:2f:
                    75:bc:7a:6d:8b:72:fe:da:fa:a7:be:6f:a2:7d:62:
                    60:ab:4f:f2:2f:42:1d:78:bb:4f:3e:e8:2a:30:11:
                    b6:c5:0c:86:a3:21:6c:3d:19:d1:2c:68:21:94:57:
                    dc:a2:25:f7:e5:43:c9:a3:98:b6:ed:36:42:19:93:
                    a4:58:83:58:44:fc:fa:07:2f:4a:07:a2:d2:66:6d:
                    59:62:47:96:49:1c:6b:ad:cd:1e:72:7b:22:1a:f5:
                    93:d5:c5:c7:00:48:2c:2b:92:5b:f6:73:9e:c5:31:
                    dd:ce:74:0d:6d:2b:ae:5e:fb:56:2b:c3:57:23:38:
                    61:85:22:2c:6c:8e:95:2c:59:40:c9:45:16:19:b3:
                    92:8f:b3:d7:9b:90:b8:8e:de:7c:fd:70:72:82:b0:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:28:8B:06:B4:C2:9E:7C:E4:E6:E8:17:DB:46:F3:1A:82:E6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/dfaa2096-04b8-3838-abda-5d5f24fb3cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/496749ae-a2a0-4956-9863-7bb09c662ce1.crl

            X509v3 Authority Key Identifier:
                keyid:CE:8D:C0:59:CF:90:34:39:7E:8B:EE:0D:2A:8A:16:B0:B4:E8:73:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a2:35:e6:af:af:9d:f7:7e:1e:71:e1:c6:a1:6a:6c:1d:15:
         8d:57:27:02:1a:01:c2:69:d3:0d:cb:ff:12:a6:d1:ef:51:3a:
         ac:76:4d:2f:23:dd:31:a8:fe:85:7c:04:00:e8:3e:3f:bd:29:
         4c:89:c7:1f:4c:dd:a3:58:df:8e:34:e7:73:e9:fa:b7:70:e1:
         e8:a2:48:c1:d5:54:3a:12:68:9d:89:72:aa:0f:73:10:77:00:
         59:2b:43:41:ac:28:ef:6e:31:03:08:b4:98:bd:43:16:ed:c6:
         62:0d:ce:c9:0a:57:b9:dc:07:bc:ac:27:48:62:97:8b:05:ec:
         4c:d5:41:41:c5:a5:00:51:ce:fe:b2:ff:f9:a8:7d:8f:df:b2:
         09:3f:a4:06:e9:1d:62:82:38:6e:ed:a8:63:21:ce:7a:d8:10:
         f3:de:cf:12:34:3f:29:9c:64:fd:48:13:be:9b:86:c5:cd:8d:
         ac:2a:68:b5:34:1d:6e:d8:c5:64:3d:da:b3:8e:d4:1b:5b:81:
         2b:07:93:49:1b:88:a8:3a:c6:8c:8c:d0:2d:6b:d1:76:2c:51:
         df:73:34:41:a9:97:88:73:06:f8:94:fb:b8:65:dd:5b:6f:55:
         c5:3a:c7:9f:84:3d:dc:31:8e:81:96:ff:09:78:75:49:2e:c1:
         db:66:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:57:48 2026 by rpki-client