Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/30d4c58b-9262-3d20-a15e-9fd2efed4335.roa
File:                     30d4c58b-9262-3d20-a15e-9fd2efed4335.roa (raw, json)
Hash identifier:          9aLTpDXiDCXFzsGtG0kM6jF4/i9MG4C9FyosJMlWun8=
Subject key identifier:   71:E0:0D:DC:40:74:1A:26:14:B1:3E:E4:BE:DD:86:70:D3:DD:0B:19
Certificate issuer:       /CN=b5f48b26-d1bd-4f55-9507-2773595cf9a2
Certificate serial:       010D0C9F4328584E74FF0C23D86FD628F4B90680
Authority key identifier: BB:54:83:B4:5D:1E:94:DC:7F:63:F2:8C:55:61:D3:28:61:34:CF:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/30d4c58b-9262-3d20-a15e-9fd2efed4335.roa
Signing time:             Fri 10 Jul 2026 22:36:10 +0000
ROA not before:           Fri 10 Jul 2026 22:36:10 +0000
ROA not after:            Thu 08 Oct 2026 22:36:10 +0000
asID:                     396982
IP address blocks:        2604:2be0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:ff:0c:23:d8:6f:d6:28:f4:b9:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f48b26-d1bd-4f55-9507-2773595cf9a2
        Validity
            Not Before: Jul 10 22:36:10 2026 GMT
            Not After : Oct  8 22:36:10 2026 GMT
        Subject: CN=bb4a9d5d-790e-41e1-8f88-1a8eb0cbfd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:57:91:af:ac:1a:3b:8f:5f:4e:8b:27:a2:
                    1c:98:f7:e5:6f:9c:4a:70:67:26:54:88:2f:24:5e:
                    cc:84:4d:03:d6:c6:42:d6:07:56:9f:12:12:18:4d:
                    17:83:d3:7e:b3:54:ca:8e:0f:a8:8c:c2:53:78:e6:
                    e7:65:34:0d:2e:fa:dd:8c:0e:67:89:f8:51:7a:cc:
                    15:8b:27:b0:b3:7f:5f:5f:14:eb:57:8c:7e:e4:00:
                    d8:82:0a:19:cb:0e:a3:97:24:c2:b4:7b:18:fe:85:
                    d3:3c:dd:be:ad:71:e7:5e:96:5e:82:89:5d:b7:dd:
                    51:aa:06:c5:94:b7:17:7f:c1:b8:d7:60:78:cc:88:
                    8c:1c:7f:dc:1d:47:57:5c:3b:fe:80:1c:83:51:2b:
                    7e:c2:a1:52:79:a3:2f:a5:76:0d:b6:cd:32:17:22:
                    72:43:ee:80:10:9d:83:6a:a3:82:43:1f:a6:27:b4:
                    e1:f2:10:4e:99:b8:70:d7:2e:3a:d0:dc:07:51:f1:
                    c3:5e:b2:cb:f4:61:10:2e:a5:c4:4f:8d:04:03:3d:
                    05:4e:94:d0:37:66:fc:2e:26:d5:22:72:39:ad:6b:
                    a0:69:9b:c1:d6:fc:87:f0:1a:94:a3:38:6b:a2:12:
                    6f:04:e0:29:b2:3d:76:02:26:b6:58:ba:8f:a2:19:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E0:0D:DC:40:74:1A:26:14:B1:3E:E4:BE:DD:86:70:D3:DD:0B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/30d4c58b-9262-3d20-a15e-9fd2efed4335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.crl

            X509v3 Authority Key Identifier:
                keyid:BB:54:83:B4:5D:1E:94:DC:7F:63:F2:8C:55:61:D3:28:61:34:CF:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2be0:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:ad:5c:18:93:a9:55:98:e0:ff:6c:63:ab:f9:43:b0:f1:
         a2:3d:11:c8:1d:9d:e3:19:bb:1c:7f:23:43:cc:89:30:5f:19:
         74:3a:25:e5:db:a0:0c:06:67:e6:a1:27:bb:7a:95:ac:a6:16:
         51:26:75:2d:c2:65:9f:fd:69:1b:52:da:76:65:d1:c4:eb:5a:
         34:31:b4:6e:11:f7:74:2c:1c:95:09:af:cf:05:60:6b:7c:dc:
         64:3a:82:79:c3:c8:39:e6:19:e4:f6:39:9e:d6:be:73:0b:0e:
         2b:f5:eb:77:2d:be:de:6b:37:26:6f:bc:d3:77:75:70:9f:c1:
         14:e5:f1:d1:53:fc:3e:8a:c7:6e:26:10:79:98:c2:09:11:ea:
         b8:02:6d:32:17:8d:13:e2:82:68:6e:ec:32:e8:bf:aa:0b:a8:
         d5:43:db:84:17:cb:12:88:27:20:0d:45:5f:fb:35:0e:9e:3c:
         09:67:06:9b:8a:77:04:5c:83:f9:4b:97:a1:46:71:fc:bf:d6:
         9f:d6:bb:a2:53:f9:b8:8e:ec:74:be:fd:af:5a:f5:6a:9e:39:
         f5:aa:81:4c:d6:63:5d:12:06:8e:10:15:2c:aa:68:f2:34:78:
         47:c5:6d:4d:c6:fa:17:ef:dc:45:bf:e6:c9:71:5e:21:5e:71:
         16:9b:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:37:06 2026 by rpki-client