Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c2392220-0844-3bbd-a19f-ca376b054bcc.roa
File:                     c2392220-0844-3bbd-a19f-ca376b054bcc.roa (raw, json)
Hash identifier:          JppA0dp+eU55a/BNRLhPqDj47H7KBr8z+CLUmypanj4=
Subject key identifier:   05:1A:79:F6:58:B4:D0:B3:75:E9:D8:F7:40:6D:01:A5:2A:9D:13:BF
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E6F3A1B0D97432E4C16C60BC0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c2392220-0844-3bbd-a19f-ca376b054bcc.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        2607:dbc0:f020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:1b:0d:97:43:2e:4c:16:c6:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=13af03e9-709c-40c9-9fb0-cd4ab294801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:71:02:6f:e4:a8:7e:27:e4:3a:8a:c9:90:
                    32:5a:fd:2b:4a:0f:3f:4e:79:fd:97:08:64:cf:cf:
                    66:37:76:17:9e:bd:71:a6:46:a9:67:60:d1:4a:f5:
                    b2:9e:df:c5:b6:c6:65:c7:c1:bf:51:ee:26:3e:55:
                    60:a8:f8:ce:99:cc:58:2d:a6:08:ec:a1:6e:f0:f9:
                    6a:9d:42:03:63:3d:e9:4c:5a:72:bb:88:26:85:4e:
                    fa:41:45:c4:7e:c1:49:71:a1:4d:22:24:c0:4c:7f:
                    62:47:0b:05:20:05:99:29:2f:b9:3c:b1:ff:fb:97:
                    76:21:16:dc:a7:60:b3:c3:b2:99:fb:10:8c:cf:37:
                    1b:a4:76:f7:fb:91:f7:5f:a4:1b:e4:82:35:ac:bc:
                    97:0c:cb:b9:52:6f:e2:44:45:2c:cf:a0:ec:91:bc:
                    99:16:5d:0e:08:fe:e9:88:85:33:79:61:58:28:77:
                    b9:4e:7b:d5:78:d6:50:70:64:f9:c9:f8:7b:ad:4f:
                    e7:fb:55:b6:54:4a:56:f7:48:a5:db:af:2f:bf:3f:
                    f7:52:74:5a:3f:88:49:e8:5c:2a:1f:36:99:77:85:
                    f1:af:20:fc:7c:d3:40:46:0a:bb:e2:d2:11:ca:22:
                    cb:e8:33:77:ae:95:b3:43:a3:6d:46:d7:35:e1:e2:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:79:F6:58:B4:D0:B3:75:E9:D8:F7:40:6D:01:A5:2A:9D:13:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c2392220-0844-3bbd-a19f-ca376b054bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:f020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:d7:10:cc:4b:3f:44:b6:08:e1:fa:58:e8:de:38:86:df:
         da:09:73:80:d9:25:29:0a:95:de:d3:eb:c0:fa:60:15:86:5a:
         52:ed:70:29:f9:f9:75:81:38:69:ae:fa:fd:1f:f3:aa:f4:36:
         3a:f5:d1:00:54:1c:ab:6c:53:27:b0:c5:82:8e:29:d3:f2:ce:
         35:4c:1e:03:c0:08:69:33:5b:3c:c7:0b:b6:7f:81:a5:3e:97:
         b7:01:0f:66:e2:9e:79:47:ef:82:f9:f0:9e:78:31:ae:7d:47:
         67:ce:e6:1f:ee:1a:ed:84:fe:30:9c:fc:89:ce:a2:e7:0c:34:
         de:ff:21:08:e4:50:ff:cc:4b:1b:00:be:a4:30:8d:02:ae:46:
         57:63:82:ba:02:cc:5c:2e:26:dd:cc:e6:45:84:eb:da:29:e7:
         fd:01:cf:29:ce:76:15:b5:8b:ea:5c:78:1e:3c:c3:f2:37:57:
         4b:f5:4c:39:1b:67:30:9c:be:54:6a:65:6a:e5:f9:35:3f:ba:
         bd:e4:64:0c:b5:2d:24:41:45:e5:07:92:b2:17:50:14:3c:67:
         4f:52:bf:db:67:2a:b0:9d:70:81:a0:11:72:56:13:41:25:8f:
         c4:3d:ea:57:72:ac:a5:6c:0d:de:d2:ae:52:72:d5:67:b5:2a:
         07:9e:e7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:08:15 2026 by rpki-client