Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
File:                     8370a0b9-b3bb-3794-b676-98a3ff12db47.roa (raw, json)
Hash identifier:          LMLkmHm8llBq+Ntgm7p3hibSPGv19MtwZ1zr5T4Ertk=
Subject key identifier:   32:32:EE:30:3F:F5:D4:9A:B1:79:08:2C:DE:71:AA:10:78:47:DC:72
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584E885A4B133F1B27B48C83BD49
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     6142
IP address blocks:        2620:9:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4b:13:3f:1b:27:b4:8c:83:bd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=fa0d4e52-6434-4f5f-87f5-5eac9af18f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:a7:83:4c:b0:fe:0d:bc:8d:91:b5:b4:a4:
                    f2:45:03:d3:69:9d:63:28:6d:fe:8d:f9:9e:69:59:
                    ea:52:34:95:33:38:69:f8:28:7c:2e:6b:27:42:1e:
                    5b:9b:04:73:97:73:f5:20:ed:cc:af:27:32:e0:7c:
                    12:1a:a2:71:c4:35:bf:fe:53:45:b4:9d:11:f7:8b:
                    77:3a:98:e7:4e:b7:c2:6d:66:32:2d:77:fe:1f:85:
                    78:88:4b:59:07:60:8b:b2:9f:2b:3c:2e:12:88:e2:
                    d7:c0:68:5f:1a:0b:ce:32:0a:0c:1d:6b:96:9a:e5:
                    e4:d5:5d:2b:da:19:bc:57:b7:d5:66:06:31:df:86:
                    27:d9:f3:27:c5:54:0c:21:52:04:f0:ca:5c:9c:21:
                    89:08:dc:fa:93:f1:42:a1:ee:50:c0:df:f5:ee:a5:
                    ee:fd:30:1c:74:27:f0:da:a9:3c:90:25:ac:3d:b6:
                    17:76:bb:93:4d:23:30:29:b2:90:c1:e9:d8:04:54:
                    59:37:e5:6d:10:c0:27:88:d3:a5:48:04:87:2d:cf:
                    8a:7f:36:22:e1:c2:85:66:80:e0:0c:7f:e8:bc:23:
                    1a:d8:bc:a0:91:90:f9:e5:a9:8c:fd:45:83:45:17:
                    55:9b:03:88:4e:8b:5e:a7:64:2b:db:8d:1a:ad:9b:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:32:EE:30:3F:F5:D4:9A:B1:79:08:2C:DE:71:AA:10:78:47:DC:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:57:e9:e2:b7:4b:d1:27:01:5b:13:36:70:b0:b0:f9:0f:83:
         51:30:2f:89:74:9a:45:cb:2b:47:8c:18:4d:6a:37:6c:60:a9:
         10:dc:78:06:71:fc:bc:06:7f:a6:b4:77:bf:9f:75:74:55:3a:
         f0:5a:70:17:c1:6f:64:40:7e:f8:78:f7:cd:63:c7:7b:5d:e5:
         1d:4c:22:0c:bf:eb:91:67:5d:02:6e:ca:2e:d6:3e:31:78:5c:
         05:22:38:c2:72:ff:4c:2d:ea:38:8f:28:7a:63:5c:35:9c:0c:
         da:0b:2b:c8:75:87:60:81:82:eb:03:3e:ed:d5:fe:c8:b4:47:
         e4:bd:98:a6:f4:4f:f1:e0:d7:42:c9:ad:62:3c:8b:4c:7c:e5:
         b2:6a:d5:84:8b:34:ec:14:8f:19:5d:80:5f:51:cc:98:3c:79:
         15:23:55:52:c0:8a:9f:8e:2b:78:e6:dd:e9:20:67:32:73:9b:
         46:83:b6:61:41:4b:28:a7:98:e2:4f:eb:14:d6:67:c3:dd:82:
         15:82:97:af:cf:4f:35:b1:2e:3f:ed:62:c7:df:d3:47:21:4a:
         3e:64:fa:90:da:3d:b3:9c:9a:cf:4a:cc:3b:f6:e0:3f:7d:06:
         91:90:25:dd:62:93:db:29:ad:82:95:c5:43:2a:26:6c:77:5d:
         ce:5f:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:54 2026 by rpki-client