Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa
File:                     a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa (raw, json)
Hash identifier:          sKg/47OwAx9NRFVJwVEiiLyDG3rkjt5xYjCxRp7eZMg=
Subject key identifier:   FD:1A:A7:F7:92:C6:19:45:F6:7B:E4:57:30:B9:EA:DE:EB:01:35:F2
Certificate issuer:       /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial:       010D0C9F4328584DC83040D6C146225245AB96C0
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     4
IP address blocks:        2001:500:84::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:40:d6:c1:46:22:52:45:ab:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=50017a76-eb0c-48fe-8497-2feae443fb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:be:9c:a0:f5:fb:d4:d9:40:8a:1c:c7:63:
                    16:31:36:9f:75:44:0b:20:59:d1:75:6c:54:50:49:
                    39:ee:78:06:84:4a:88:7b:15:48:cd:24:0d:4a:35:
                    30:be:5b:71:11:5c:4e:b3:fe:bd:0b:df:79:76:db:
                    b4:8c:13:5d:15:bc:65:0b:c4:bb:4a:cc:07:21:29:
                    59:17:87:3c:15:8c:19:af:dc:1a:5b:06:4c:3a:6b:
                    70:79:f5:ff:32:d3:52:c2:76:8d:ef:97:23:ce:ff:
                    30:52:44:ef:f5:5c:26:d4:ce:16:f6:3a:8f:25:6f:
                    6b:6e:d2:3e:b6:9d:fb:ae:9d:1b:5e:7b:80:b5:95:
                    14:0f:63:35:dc:2d:8d:18:02:27:18:f9:b2:ca:37:
                    0c:1a:5c:0f:54:34:d8:30:76:84:0d:14:6d:a1:0b:
                    51:fb:bc:8a:7d:3a:d9:89:81:44:3d:ff:c7:aa:8f:
                    3a:b9:27:1d:c3:9b:87:99:5b:c2:64:55:eb:cc:aa:
                    0a:bc:96:4b:16:cb:d5:c2:10:45:1a:b4:02:83:01:
                    2d:78:56:db:53:c7:aa:8a:db:3f:19:9e:4e:ae:22:
                    6e:87:ea:32:d9:34:5e:a9:25:06:d1:38:db:68:21:
                    02:cb:9f:c6:86:08:6b:db:4c:9a:66:3b:de:f3:62:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1A:A7:F7:92:C6:19:45:F6:7B:E4:57:30:B9:EA:DE:EB:01:35:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl

            X509v3 Authority Key Identifier:
                keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:49:13:e7:8f:79:76:8e:32:18:25:51:4e:9a:c0:ac:9f:bc:
         22:f9:db:0a:55:55:ef:c6:a0:76:0a:0f:de:63:7c:3e:6c:ef:
         28:72:32:b1:fa:d4:99:13:dc:56:3a:20:57:da:91:e9:05:d7:
         01:ea:8e:4e:49:7d:a8:c4:28:d6:98:55:08:7f:76:55:43:78:
         02:09:07:0a:66:38:e1:48:dc:39:a4:5e:bb:7e:da:3b:93:00:
         d1:2c:ef:46:59:e9:bc:8f:88:4e:48:51:a4:dd:4c:7d:f3:79:
         b1:0d:76:c4:60:a9:d7:f4:e2:be:d4:19:a7:15:ac:6c:d4:7b:
         d4:1a:e9:da:3d:71:d9:25:fb:47:ae:85:46:29:6b:c1:65:93:
         27:bd:7c:1c:8c:79:3e:8d:aa:58:e2:e9:96:bc:dc:e7:15:5f:
         4f:9a:19:a7:2b:79:79:42:02:d1:8d:e8:68:0d:32:d5:08:fb:
         06:43:d8:f3:a7:96:a0:e0:07:bc:98:45:03:f4:b3:82:62:0f:
         13:cd:74:f9:93:2f:2b:cd:bd:fc:02:ca:2c:57:3b:06:b2:ad:
         d4:fa:33:37:25:ee:56:71:ed:35:04:bb:c5:a1:1e:b0:36:ec:
         98:43:20:37:b4:32:16:96:ad:4e:eb:db:4b:e4:9b:a9:23:85:
         15:d7:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:14:02 2026 by rpki-client