Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ef8d82f-c819-3970-a1d7-24fe0f856ffb.roa
File:                     3ef8d82f-c819-3970-a1d7-24fe0f856ffb.roa (raw, json)
Hash identifier:          eflZiqEGMhED7KvajQjWNvYcx4fG5uHNMfiShx/7S38=
Subject key identifier:   96:43:3B:58:36:B6:8F:E5:BF:33:26:60:3E:60:32:A7:54:80:B5:F1
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E6F3A30B976495015A110C080
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ef8d82f-c819-3970-a1d7-24fe0f856ffb.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:30:b9:76:49:50:15:a1:10:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=efa5d559-86c0-4a24-9af5-bf608fba10b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:dc:5d:a2:62:46:8e:d8:5e:9f:7f:e8:fa:
                    b5:1f:84:70:db:63:91:06:5c:80:13:de:f6:b1:52:
                    d2:61:f0:41:76:88:22:b4:bf:9e:d7:41:b4:4f:62:
                    e4:fe:81:3b:2b:7d:1c:db:7e:7c:29:0d:53:9d:10:
                    71:1a:b2:b0:85:11:45:ae:99:e0:10:29:fd:9e:20:
                    fd:c7:d2:6e:97:4c:a4:28:7b:ee:e9:05:be:48:32:
                    c7:c8:8e:0c:b1:17:38:68:40:c7:ba:40:23:57:8c:
                    31:2f:dd:2d:42:f5:32:f0:a9:5f:0f:3a:13:1c:56:
                    a5:ae:74:ca:b2:64:ab:51:10:81:56:eb:34:e4:db:
                    aa:7f:a9:68:16:e9:0a:ec:8a:5f:35:62:70:e1:6e:
                    6b:fb:e2:1a:1d:90:0f:e2:93:f4:6f:61:78:ee:1b:
                    2c:a6:b6:b3:2b:a6:c2:72:c0:79:be:63:36:96:6f:
                    88:52:d2:95:92:92:20:51:b9:78:1a:9b:5f:00:82:
                    40:fe:fb:f2:0d:67:3d:38:af:b8:26:e4:93:d3:6f:
                    e3:e2:f1:dc:0f:54:e1:4e:e0:92:0a:98:28:fd:0b:
                    24:91:f8:c2:c1:34:38:eb:8e:d5:e7:f0:e3:50:fe:
                    fc:9c:b3:59:ec:36:86:e3:a9:61:dc:d0:c0:c5:ca:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:43:3B:58:36:B6:8F:E5:BF:33:26:60:3E:60:32:A7:54:80:B5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ef8d82f-c819-3970-a1d7-24fe0f856ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:09:29:b0:ad:d3:df:e4:3e:7f:ab:64:1b:ea:ba:01:50:
         6e:03:7d:ec:f4:50:d8:92:22:10:79:03:60:b9:e2:a7:b6:72:
         91:06:97:cb:22:57:f9:22:48:15:43:ef:8c:9c:67:2c:d7:97:
         02:67:0b:fd:46:18:56:79:b7:34:62:ed:fe:b7:34:de:82:d4:
         4a:dc:32:27:5f:4e:36:5f:14:b1:70:0b:67:49:9f:17:cd:26:
         61:a5:dc:3c:12:a7:02:95:5c:21:ea:91:a2:7b:1e:b9:c1:bd:
         85:9a:1d:fb:06:66:b7:3a:21:52:bc:2a:a2:77:fa:6c:bb:28:
         21:0a:aa:78:72:06:ac:8b:e5:14:29:be:31:82:f9:20:1c:be:
         a8:18:42:2c:92:2f:0c:43:13:d9:7a:2b:1e:73:bb:0c:95:f2:
         ce:90:16:fc:34:c6:81:4c:b1:95:66:79:b9:0f:28:e5:95:62:
         e5:ff:2b:53:ab:2a:fd:0e:ea:df:00:2b:2f:43:83:5f:21:0a:
         65:ed:82:02:32:83:23:67:4d:53:0e:10:22:ce:a6:0c:f3:e8:
         44:01:fc:54:77:c7:d1:6b:01:bd:67:ed:4e:d5:eb:fd:e3:76:
         9b:85:a7:17:80:86:d2:aa:f1:2e:9a:26:fb:56:77:94:3e:d7:
         01:b4:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:20 2026 by rpki-client