Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa
File:                     b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa (raw, json)
Hash identifier:          3Bqsnv1gU27/QRdggkM+XklrQY5P4CUMh06nMjOEndo=
Subject key identifier:   DE:BC:90:0E:D0:A1:1B:50:1F:59:E2:77:04:53:FE:3C:1B:82:4A:31
Certificate issuer:       /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
Certificate serial:       010D0C9F4328584E7E950A062BB69BF0CF987280
Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2602:f74b:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:0a:06:2b:b6:9b:f0:cf:98:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=07b8afec-9640-4588-a1c6-66c2f0e087bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:44:c9:55:67:8a:43:13:39:d9:b9:bb:53:
                    2e:e7:70:30:7b:24:cc:c2:9f:2b:7c:e0:c9:9c:21:
                    de:c1:ee:98:87:25:84:dd:30:70:ef:e2:a7:65:4c:
                    aa:06:fc:f5:e4:8a:5a:09:46:b7:a8:7f:73:1d:2b:
                    0b:7f:0b:46:16:f9:e8:1e:f1:12:14:7f:e4:ed:65:
                    87:e9:4c:ad:84:53:67:11:3a:db:75:25:aa:5c:35:
                    2b:69:be:66:13:13:09:15:ec:11:9f:20:ee:92:7f:
                    d0:fa:7f:c5:36:6f:ed:94:60:1f:cc:71:e5:53:01:
                    ac:d3:e8:84:9a:b1:2c:e8:1e:fc:a9:4e:ba:53:d7:
                    85:99:06:c1:6f:7c:63:d9:ce:91:e4:f8:44:9c:70:
                    5d:21:fb:92:dd:15:2c:91:8e:08:bd:71:c4:42:a3:
                    a8:16:ea:cb:6a:c4:85:bd:7b:5e:0e:b6:d2:42:e0:
                    45:ab:42:74:47:59:1b:5b:1f:43:e7:ac:6f:1f:b2:
                    6b:74:cc:c1:2b:12:b5:1d:67:41:39:fc:36:58:92:
                    f4:38:5a:52:01:b2:f6:64:93:9c:5b:96:26:1d:08:
                    ca:e9:65:de:d3:8e:e8:14:bd:16:e4:1f:22:59:20:
                    1c:d8:1c:fd:04:f2:6a:11:6f:d5:7e:ff:05:c7:54:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BC:90:0E:D0:A1:1B:50:1F:59:E2:77:04:53:FE:3C:1B:82:4A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl

            X509v3 Authority Key Identifier:
                keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f74b:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:b1:6b:85:87:0f:77:c5:94:f1:98:83:50:76:00:70:d3:
         af:f6:c9:7b:2d:56:7a:8d:19:c9:64:2d:ab:75:e3:c0:1b:37:
         e8:90:78:0b:c5:01:50:08:20:46:78:32:3d:54:69:99:4f:df:
         dc:d0:da:59:e6:7c:0b:a0:ce:a8:bf:17:a2:76:df:e0:e3:2b:
         ef:f9:64:ef:2f:ab:c1:a4:ed:b6:9d:46:0b:e6:7d:7b:a7:02:
         e0:00:cd:5a:f1:d1:a2:b6:ae:c7:ce:f3:a7:76:63:f6:2d:58:
         9b:0b:22:71:fe:fa:d4:0e:2f:87:af:3a:37:1e:d4:93:17:6e:
         fa:ae:f2:74:3f:98:06:5a:1a:da:98:1d:29:6f:40:2f:bb:36:
         80:50:a9:f2:d4:c9:f6:09:a6:69:6b:97:ee:9e:b6:5a:02:cf:
         d8:ed:95:76:1b:0a:52:47:20:32:ff:4c:c7:92:99:61:76:1a:
         00:fe:83:56:83:41:f4:ad:00:65:65:70:09:80:0e:98:2f:3d:
         a8:24:c5:32:64:54:72:15:16:ee:a9:38:95:4a:29:d9:dd:55:
         38:81:3a:62:5f:01:66:aa:22:28:ab:04:32:17:d0:2d:62:fc:
         c7:20:f7:ac:a5:c1:bd:fc:34:f6:8f:0c:16:4e:f0:79:91:fa:
         10:0c:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:37 2026 by rpki-client