Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/b04b8066-5593-3817-8877-8cb7e2ef29bd.roa
File:                     b04b8066-5593-3817-8877-8cb7e2ef29bd.roa (raw, json)
Hash identifier:          PG5Io4dgQ40ZPmmkVgN5YuhcMJNtjJ/oCROH427dwwI=
Subject key identifier:   15:4F:31:44:F8:79:3B:28:D6:4B:2F:8C:BB:1E:7A:70:69:AB:A5:9B
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584E7FFA291922143236ECF5AC00
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/b04b8066-5593-3817-8877-8cb7e2ef29bd.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     198465
IP address blocks:        2602:f9f6:460::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:29:19:22:14:32:36:ec:f5:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=5535101c-b41c-46a1-a077-01387736286f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c7:58:72:b5:8c:be:1b:5d:f1:32:d0:58:7c:
                    28:0b:91:96:30:a0:f4:d8:59:03:a1:5f:c5:ea:05:
                    bc:d8:23:0d:c9:75:f9:32:48:54:69:9a:7c:59:ad:
                    36:b4:33:49:72:5a:88:25:56:bf:7b:51:4d:7b:d5:
                    31:dd:10:08:c2:b8:06:80:25:10:3a:08:df:c4:49:
                    e3:3c:8a:e3:7c:3c:f9:e2:48:e9:5a:df:2b:4e:f6:
                    cc:56:a5:96:ab:95:ca:e2:9f:6a:9a:e9:d6:42:22:
                    84:79:6c:3f:4e:b3:47:bc:81:d5:03:0c:77:d6:56:
                    fa:a7:6e:42:ec:bf:58:46:27:91:ff:13:f4:9e:c0:
                    51:3c:98:97:49:4c:5b:a4:43:37:c6:0d:0e:6b:c0:
                    f4:af:32:bc:a6:e6:56:58:9b:5f:50:05:58:d0:15:
                    8a:25:a7:4f:0a:8b:1c:7a:11:f8:eb:d4:43:e8:12:
                    21:f4:63:39:cd:93:ac:61:3f:11:57:14:29:8b:26:
                    c8:d3:1d:97:1f:1a:88:a9:01:e0:7c:3a:38:aa:af:
                    6c:98:25:06:8d:6c:8c:45:c5:a8:58:6b:56:5e:e6:
                    78:44:62:fe:db:11:cc:ed:04:14:78:d7:af:8c:26:
                    72:79:8a:e3:75:ec:af:d1:74:d1:0c:b0:8e:87:d7:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:31:44:F8:79:3B:28:D6:4B:2F:8C:BB:1E:7A:70:69:AB:A5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/b04b8066-5593-3817-8877-8cb7e2ef29bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:460::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:00:17:68:f1:1b:93:82:e3:b6:55:3f:1f:10:25:ba:47:34:
         20:48:00:f8:12:b7:9d:e5:47:fb:98:80:43:53:18:bb:b1:63:
         9f:09:20:ba:5a:e4:c2:1e:d7:48:1c:de:74:a6:c9:c1:06:fe:
         83:98:c4:9d:19:47:7a:58:a8:5a:93:ad:88:a2:12:cd:f4:45:
         fe:4c:b9:11:90:be:5f:83:47:fa:f3:af:c5:c1:5c:e2:4a:3e:
         fa:e6:d5:4b:b6:09:0e:62:fa:0e:8a:c0:de:f3:25:0a:de:2a:
         d6:2a:f3:5a:86:6b:b7:e5:23:eb:3f:75:e4:62:8e:cd:ae:61:
         68:3f:40:60:be:4d:3b:d4:b9:6d:c5:86:c8:9c:fb:1d:e0:5a:
         ee:b9:97:98:d4:14:24:56:4f:e7:98:48:4f:3b:8c:d1:81:a3:
         7e:18:73:ab:45:c8:fa:64:ac:40:58:68:e4:cc:44:5a:ba:30:
         85:79:e7:7d:43:da:72:08:cf:3e:06:7a:ba:89:22:8c:0b:5e:
         71:3e:eb:12:71:0f:f4:03:ab:bf:29:bd:a6:4a:eb:66:57:dd:
         dd:b1:3e:ae:47:b9:85:55:46:12:4b:87:75:38:fd:9a:f5:f4:
         ee:a3:34:84:15:bc:87:54:71:5f:62:4b:1e:f8:3e:31:d2:87:
         92:03:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:53 2026 by rpki-client