Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f4df698b-69bf-3151-a07d-8117df8d46e2.roa
File:                     f4df698b-69bf-3151-a07d-8117df8d46e2.roa (raw, json)
Hash identifier:          rxr4uerSgA+1zAxpslBZykojQx8lP1uzxbRi6FBW5N0=
Subject key identifier:   45:64:DC:1D:59:98:A6:45:42:FE:32:C3:F6:BC:0C:FE:6B:C7:F3:37
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E6F50ECC0E3420C4F040EAE40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f4df698b-69bf-3151-a07d-8117df8d46e2.roa
Signing time:             Wed 08 Jul 2026 21:46:18 +0000
ROA not before:           Wed 08 Jul 2026 21:46:18 +0000
ROA not after:            Tue 06 Oct 2026 21:46:18 +0000
asID:                     0
IP address blocks:        2001:550:a08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:50:ec:c0:e3:42:0c:4f:04:0e:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  8 21:46:18 2026 GMT
            Not After : Oct  6 21:46:18 2026 GMT
        Subject: CN=83546431-3c13-45d0-bba8-f933efdd0588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f2:1e:c6:46:6d:38:92:9a:23:9e:27:0d:18:
                    fd:4b:a1:1a:39:dc:69:5d:49:3f:46:16:cb:6a:54:
                    19:6a:b5:07:13:fa:7f:9b:df:9c:31:34:c4:11:4e:
                    f4:cc:1e:69:3a:75:39:9a:48:09:f5:61:d5:17:07:
                    74:5d:14:eb:af:ce:b7:39:3d:40:70:34:1a:bf:a6:
                    68:70:e8:8a:c4:e4:eb:6d:af:1a:50:cc:32:bb:37:
                    a7:95:55:c9:70:0d:1b:9f:95:d2:f7:2a:23:28:e9:
                    f9:e6:58:8c:fa:5c:15:4f:7c:2e:20:d8:d0:d3:50:
                    36:3f:0f:c3:9d:bd:6c:80:72:3e:c9:1e:db:cc:e5:
                    e0:d9:4a:6c:8f:b3:69:a3:43:9e:2d:fa:01:f6:33:
                    31:75:2e:4c:45:b7:9e:e1:b4:32:a9:fa:fb:fa:70:
                    9d:8c:1f:ed:37:5c:3f:bd:dd:ad:fd:20:54:5b:8e:
                    94:32:aa:e2:9e:1c:33:a8:c7:56:43:55:27:c9:ea:
                    b8:0b:ae:5b:7d:0c:ab:1e:e8:a1:9f:24:9e:21:c8:
                    8f:43:c2:d1:58:33:10:ff:29:fc:a3:c6:95:fc:7a:
                    32:a7:10:71:de:aa:e2:a3:e7:bf:f9:ef:a6:15:94:
                    dc:28:b3:9c:b9:a4:94:38:fe:c0:27:ec:1a:25:ed:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:DC:1D:59:98:A6:45:42:FE:32:C3:F6:BC:0C:FE:6B:C7:F3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f4df698b-69bf-3151-a07d-8117df8d46e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:550:a08::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:9c:07:7d:41:94:32:95:1d:ec:7b:1d:c1:29:d8:c9:2e:50:
         cf:28:cf:ca:cf:6a:f9:dd:08:be:84:1c:07:f6:14:ff:83:68:
         1a:9a:41:a9:f3:41:64:67:3a:5e:89:9e:42:94:45:48:8e:74:
         c5:04:c6:af:68:29:8a:fc:64:a8:98:18:a2:96:4e:ab:f2:ed:
         9c:a1:3a:60:dd:3b:c2:cc:e1:85:b0:0e:79:22:ea:ea:31:32:
         8d:b2:16:66:cb:a4:9d:ff:aa:bc:5a:49:14:f9:f7:9e:9d:79:
         33:ea:b7:2d:f1:ad:35:99:39:a3:f4:45:b4:46:cc:8e:27:47:
         af:bc:0c:11:e9:5d:e7:bc:21:65:9b:e6:51:c6:8f:fb:19:45:
         f0:ba:df:2f:3d:7f:11:17:02:8c:ca:3f:63:0a:82:ad:96:16:
         79:e9:b0:bf:a9:a6:81:51:e0:7c:96:e3:e8:6b:ef:f8:a5:12:
         ac:f3:c3:bb:7a:7f:4b:66:43:05:24:eb:66:a1:2b:b1:ef:27:
         a0:90:fe:61:0e:53:cf:34:8a:d2:86:ca:db:e4:af:f2:64:64:
         9f:3a:37:56:1c:cf:1e:0e:4a:6b:ea:33:10:00:c2:06:66:a6:
         ea:78:91:df:9f:81:2d:71:fd:44:09:ef:61:30:e2:14:8e:a7:
         1f:a5:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:04 2026 by rpki-client