Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa
File:                     d8e3845c-489e-34ef-886c-d05badd37cd6.roa (raw, json)
Hash identifier:          eLXQYJzcK1IG5wMerB1XcYDQ75jwQPD3hsC4ZLtBTUY=
Subject key identifier:   A5:AF:F2:E3:16:AE:35:A0:FB:2E:34:C0:6D:B6:F7:16:35:AD:B6:92
Certificate issuer:       /CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf
Certificate serial:       010D0C9F4328584E7634DBC8B4D51EE34B178D40
Authority key identifier: B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     36427
IP address blocks:        2620:8e:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:db:c8:b4:d5:1e:e3:4b:17:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=5bde369b-fd1a-4c4a-bcef-8b43837c57e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:b6:c8:bc:81:a3:6c:b0:5f:76:00:c4:37:
                    c2:50:6e:9f:81:b2:e8:ab:96:5a:af:18:79:b2:f1:
                    64:df:1e:07:09:f0:c5:45:56:6c:ca:f4:e9:4d:1c:
                    6b:99:79:d6:75:3d:71:33:1d:46:a9:cf:b5:db:bf:
                    05:4b:2a:63:c6:3b:c5:54:e3:78:4c:c7:2c:8d:94:
                    ef:88:44:a7:3a:a2:9a:1f:e4:54:e7:ab:45:6e:0e:
                    4d:1d:bf:de:35:a6:54:d6:0b:6a:46:92:47:f0:64:
                    6f:e5:33:17:fb:92:fa:2b:61:5b:6e:ed:0b:64:01:
                    4a:66:76:cb:64:5d:f3:7b:0f:46:a9:62:7c:e3:0e:
                    bb:89:a4:73:88:4b:5f:0b:f5:7c:48:e3:0f:9b:72:
                    74:4c:2a:f8:2e:b0:1d:9c:fa:38:e6:2b:9b:86:53:
                    2d:7a:e2:7e:ca:ad:b8:8a:6e:35:86:01:a5:b7:7c:
                    65:25:4a:40:57:e4:1b:bd:a2:2f:4a:a1:8f:0d:84:
                    18:51:ed:b0:a3:63:6b:62:76:51:9c:ed:40:43:75:
                    24:65:fe:4c:0c:20:39:e5:aa:e5:0c:55:45:18:01:
                    10:1f:ce:e3:bc:2a:94:0f:a4:0b:81:46:38:9a:55:
                    12:c2:64:53:1e:74:e0:c3:a6:e7:39:2d:a2:b2:5a:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AF:F2:E3:16:AE:35:A0:FB:2E:34:C0:6D:B6:F7:16:35:AD:B6:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl

            X509v3 Authority Key Identifier:
                keyid:B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8e:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:54:98:27:e0:3d:4a:a9:aa:e3:75:8e:c0:92:77:51:c9:87:
         ba:0f:93:ca:3e:67:bd:58:fd:c6:df:73:99:98:99:46:45:42:
         7c:00:b9:35:2e:2e:ee:ac:4d:b1:c8:31:77:58:48:10:dc:c4:
         f9:ad:27:db:e7:0e:bf:a9:ec:67:87:6c:e2:79:9e:9d:84:5f:
         28:f2:ac:ad:88:13:0e:73:41:58:95:fc:a1:b6:99:06:8f:16:
         f5:09:0a:04:3a:d2:5d:27:93:a6:21:eb:02:aa:3a:5d:ba:df:
         99:fd:7f:b9:1c:e7:64:f9:1a:f1:55:88:07:14:4d:d9:c7:90:
         71:ae:59:67:5c:ee:eb:b4:24:6f:68:30:8e:52:c4:f6:5d:b6:
         d9:85:41:3f:5a:d6:ec:79:e3:8f:4e:33:43:7e:b5:90:aa:ca:
         6e:cd:bb:43:15:fd:c8:05:f8:fd:aa:3a:d9:21:37:cf:d5:72:
         61:28:db:4c:0f:0b:83:46:00:31:19:56:97:54:3a:85:d3:fd:
         b5:0b:7f:4a:f1:bd:d0:ef:f5:a4:6a:ce:95:ee:4b:c6:fe:75:
         0f:67:73:a3:96:bb:72:26:49:ad:e1:ca:73:e5:91:19:e4:39:
         b4:af:b9:8a:09:94:fe:25:5f:45:6c:71:f8:0d:6c:e2:ac:dd:
         e0:0c:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:51:44 2026 by rpki-client