Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa
File:                     4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa (raw, json)
Hash identifier:          vaJxLgGSAW3qtDhJ1a/E3d4HL1n0YY9kaZUuRiszX3g=
Subject key identifier:   29:BA:19:13:9C:7D:A6:09:88:FA:01:73:72:31:8F:88:67:33:BA:CB
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584E921FA2285DC7806F2AEC9C40
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     50131
IP address blocks:        2605:fb80:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a2:28:5d:c7:80:6f:2a:ec:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=5b71b123-9a6b-41e2-9084-c1a831ee6847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:f2:13:94:37:41:57:ab:3c:86:c9:f1:d8:
                    a5:84:9d:ed:cc:b7:a1:c9:aa:fb:46:94:e3:c5:66:
                    88:ee:f7:11:52:19:32:42:a8:bc:da:5d:3b:38:7b:
                    27:18:e5:e9:07:92:75:c7:0d:8e:19:18:66:e5:06:
                    b9:47:73:95:56:1c:d5:f4:31:39:fa:2e:f5:1f:c3:
                    25:d4:8d:16:8e:3f:25:07:65:9c:b9:45:e7:e3:cd:
                    7a:cb:be:ec:a4:e3:80:a7:07:68:8f:e0:7d:8a:27:
                    fc:ab:d5:0f:a4:24:70:da:85:73:37:4b:11:ee:dc:
                    5e:87:2c:26:ca:31:22:7d:2c:08:f6:fe:cc:1d:55:
                    71:84:1a:33:f2:fb:62:85:32:ed:ce:3b:19:17:e1:
                    b0:74:f1:92:ad:6d:96:50:61:01:cb:c5:e1:3c:29:
                    fe:0e:d9:a9:7e:44:3b:68:61:a4:d8:71:06:35:17:
                    78:02:16:d2:94:d6:ea:cf:0f:bb:11:56:73:ed:32:
                    f2:25:eb:17:dc:ca:fc:16:30:83:29:74:b9:6f:ca:
                    dc:3b:88:5b:d0:b2:3a:b0:9d:7d:65:8b:0c:ea:15:
                    24:2b:2b:0d:26:94:b2:47:ae:4f:91:ff:a0:d6:01:
                    d7:4e:2a:9f:43:e2:da:58:08:38:56:28:d6:85:7c:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BA:19:13:9C:7D:A6:09:88:FA:01:73:72:31:8F:88:67:33:BA:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fb80:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ad:15:2a:26:89:94:8f:1c:53:94:95:29:35:e7:5a:e1:ca:
         2c:87:3d:f9:05:72:b2:e4:a8:cf:90:bf:84:ac:be:90:5f:3c:
         a7:89:6f:fe:78:8a:e1:4f:25:66:06:45:5d:32:b9:cf:a9:86:
         40:bd:b5:a2:96:3b:ac:4f:ab:8a:31:ba:34:6a:d0:06:4b:99:
         8f:b7:4c:1f:75:ed:7f:a2:2f:31:fa:61:57:df:8f:9b:b5:89:
         5c:f9:ae:6c:8e:53:ea:a1:13:f3:cc:56:3c:1e:df:6d:99:74:
         8e:cd:ab:0e:84:ff:97:42:a3:23:42:9b:ba:f3:6a:4c:32:f2:
         d0:8a:9d:c4:9a:fd:8b:d2:46:18:ef:d2:8a:2f:fb:a4:58:81:
         da:d6:32:27:64:61:ac:b3:6e:35:e3:72:b1:3a:dd:3a:71:9c:
         3a:34:63:f4:ef:dd:84:6b:08:ea:6d:a7:cd:2d:44:29:27:5b:
         9c:02:ef:bf:f6:71:b4:49:36:7b:c3:cd:32:69:9d:b2:4e:58:
         5a:a0:13:29:fc:96:16:57:f2:b8:95:42:dd:3d:94:b1:bb:d2:
         34:ed:e7:7a:77:67:ea:ef:a0:d8:d9:c6:ff:0e:19:8e:09:f9:
         7d:dd:62:56:0d:f4:79:aa:80:06:c5:30:99:eb:96:5b:9b:3e:
         45:92:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:58:18 2026 by rpki-client