Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d84aac3e-560e-3300-823f-db7757aa0829.roa
File:                     d84aac3e-560e-3300-823f-db7757aa0829.roa (raw, json)
Hash identifier:          tCBmdoy16bkjpGvUk/WdIzsgRUql15sRy+CT7Cf2N9k=
Subject key identifier:   30:B8:1D:EC:5F:ED:98:D5:36:61:0D:FB:42:67:A7:4B:BA:E8:51:94
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E709F6D832AA7C89C42197580
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d84aac3e-560e-3300-823f-db7757aa0829.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     14618
IP address blocks:        2607:dbc0:820::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:6d:83:2a:a7:c8:9c:42:19:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=955b40b4-b1d7-472c-a90e-6755c2794804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:69:1d:f5:89:a6:95:40:4c:15:c7:3a:91:
                    71:cf:29:9d:7b:37:dc:2b:a9:e3:68:c6:ae:e5:b4:
                    e3:70:bd:b4:4e:fb:45:c1:7d:6b:e3:75:e0:5b:e2:
                    67:a8:68:cc:19:19:32:5b:ca:27:bb:51:f7:06:84:
                    7b:5e:ad:bc:bc:cb:1d:c8:88:e2:63:3d:18:2d:d5:
                    72:ac:73:a6:d4:80:ab:fd:6f:d5:62:99:ec:cd:6d:
                    f2:e2:fe:06:4c:b4:6a:43:4c:fb:d6:75:15:d2:b2:
                    c2:93:d1:db:15:b3:74:ca:6f:ab:3e:ed:bb:d0:02:
                    c6:0d:57:0d:d5:a0:43:7f:8e:3c:61:91:c0:65:1d:
                    39:24:42:f4:39:1f:6a:c7:52:e6:58:63:56:bd:5a:
                    20:87:16:92:b2:cb:55:ed:b4:7f:e2:8e:e6:97:a1:
                    2c:23:78:ef:66:90:60:57:c6:73:3c:46:81:c2:f1:
                    fb:33:9a:e9:5a:c6:f5:35:1e:2f:ed:84:1d:c7:76:
                    6f:20:ee:3d:ae:c2:c4:2c:b6:ac:2d:25:0c:e8:33:
                    bd:2f:46:03:3a:a2:f4:34:76:5d:c8:55:09:be:c9:
                    7d:79:6c:d5:b2:61:20:d6:dc:fe:e9:26:fe:5d:ae:
                    db:91:ff:6e:05:f0:11:3d:f6:19:e4:c9:88:a2:e0:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B8:1D:EC:5F:ED:98:D5:36:61:0D:FB:42:67:A7:4B:BA:E8:51:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d84aac3e-560e-3300-823f-db7757aa0829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:820::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:45:75:70:90:fe:c5:7b:27:b9:53:3f:96:f3:89:57:9e:
         93:ca:da:4c:52:21:ea:5c:cf:ba:37:5e:42:ce:47:59:ec:53:
         cf:bc:84:0d:f0:81:3a:2e:ba:8e:f6:cb:8d:4b:fc:e3:bb:3c:
         70:b0:3a:1e:32:39:63:a4:be:db:11:bb:2e:b8:c5:35:f8:b2:
         6a:dc:33:08:09:2d:28:dd:fd:72:6c:00:82:87:7a:4e:24:77:
         36:1d:76:e1:88:29:d6:0d:73:64:3f:e0:ef:93:c3:ee:16:1d:
         9d:e5:d8:52:ea:9b:80:25:08:f8:be:5b:db:b7:2f:a1:a2:cc:
         42:62:39:02:55:76:c1:49:c9:af:e3:57:05:af:13:c9:ab:ab:
         07:f0:3b:27:8e:9c:2c:01:b1:13:4f:e0:10:fb:c8:c5:2e:0d:
         0a:d1:31:e8:70:52:55:bc:52:a7:0c:c0:c6:ba:a7:27:39:75:
         b7:9a:44:e5:4b:19:43:2a:66:32:8b:92:d6:82:6e:93:b4:fd:
         47:09:0c:eb:33:48:04:0c:f7:50:5d:26:66:aa:58:44:05:de:
         5d:01:86:f6:a7:5b:0e:c6:04:02:1e:9b:b8:f6:15:5b:1f:64:
         80:be:13:6a:2a:76:87:e6:07:14:37:3b:97:2c:d7:9b:ea:31:
         4f:26:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:30:31 2026 by rpki-client