Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/038ff4e3-a7b3-305f-9c4a-6acdc0c5709b.roa
File:                     038ff4e3-a7b3-305f-9c4a-6acdc0c5709b.roa (raw, json)
Hash identifier:          2sduVwu0B2JkEdPQ5LhOB0GYIJJT+NG2FkZ6epmZkBE=
Subject key identifier:   0D:51:72:3D:F2:45:F2:5B:05:3E:2F:51:AD:46:80:B4:98:91:3D:FD
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584E577F461A31118354488BD800
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/038ff4e3-a7b3-305f-9c4a-6acdc0c5709b.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     55195
IP address blocks:        2620:10a:80e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:46:1a:31:11:83:54:48:8b:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=1b109513-975b-4434-9729-4bfe1994e403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:3c:34:96:67:a0:b2:0e:df:50:ba:83:27:
                    56:52:2f:33:de:f0:03:d4:72:48:e6:a9:c7:9c:2d:
                    72:4d:82:e0:0d:e4:8f:2b:dd:f8:81:bb:bf:b0:f0:
                    4a:d3:38:d0:5d:9f:4c:07:49:cd:b0:a8:27:80:8d:
                    aa:13:f0:9f:5b:ab:6b:ae:64:17:45:ef:f1:a9:d6:
                    0e:2f:c0:44:3a:3e:2e:a5:8b:6b:19:4f:15:13:be:
                    bf:e7:b3:81:25:42:e2:8c:0b:b5:86:83:57:2f:29:
                    0c:73:8d:10:17:8a:d7:06:b7:06:27:8c:e1:fb:bd:
                    d7:90:ac:cd:9b:e7:85:96:ce:d6:37:cb:fb:9b:61:
                    e7:67:e4:85:f1:16:ba:d8:ce:32:82:19:c5:47:5d:
                    80:82:fe:35:2c:32:46:7c:93:de:77:5c:5d:7f:48:
                    60:69:54:60:4c:20:fd:0d:11:38:02:ea:d6:3f:b1:
                    0c:a7:8e:0c:cc:ec:1d:34:a0:55:4b:78:17:18:de:
                    73:d9:0f:6e:30:27:d9:85:99:62:02:c6:2a:31:a5:
                    86:db:96:1b:05:ea:11:f4:32:65:23:5a:82:c0:0a:
                    85:d2:d3:a6:17:7a:4e:b1:49:a1:c5:07:0b:81:a1:
                    e4:17:e8:81:e2:ef:5c:f0:b3:80:6d:f9:df:0e:23:
                    f3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:51:72:3D:F2:45:F2:5B:05:3E:2F:51:AD:46:80:B4:98:91:3D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/038ff4e3-a7b3-305f-9c4a-6acdc0c5709b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:fd:54:36:06:48:d6:27:e6:95:71:6a:f5:cd:c6:b9:e3:ee:
         f4:38:d8:d0:b4:d5:3b:2e:a1:82:75:dc:05:be:57:e5:a3:a5:
         2c:02:d1:83:41:51:4b:7b:18:67:e4:c5:b6:45:64:16:51:0b:
         88:72:51:3b:bc:a4:6e:dd:89:86:1d:56:78:bd:ed:9f:6b:52:
         4c:f0:48:94:3f:01:c0:4b:ea:ba:bd:a8:e1:0a:3a:69:26:7b:
         ba:2c:ec:37:f5:ea:9e:a9:42:d6:86:90:08:6f:58:68:1f:61:
         0b:e8:67:ae:0d:97:09:17:88:dc:73:5c:29:9b:b4:cc:b6:d6:
         3d:65:e6:13:b6:a4:74:f3:22:19:a1:d9:4d:d6:c8:0b:f1:f2:
         4c:31:94:06:27:7b:51:26:ee:31:b6:a2:d2:62:dd:3f:81:a8:
         ff:71:c4:15:b0:61:f1:be:6a:17:3b:2c:f5:49:3e:93:8c:d9:
         4c:0d:43:45:ba:98:ef:f2:26:e8:b8:5a:de:ab:6b:46:25:9d:
         fb:1a:04:54:75:1a:05:44:f5:e5:64:93:bd:ef:3c:9c:97:d7:
         c0:41:56:9d:5a:7f:f5:0d:6d:64:cc:63:06:ec:57:52:e5:cf:
         fc:5c:3b:8d:b5:e6:6e:2b:1e:5c:53:11:ac:54:e5:dc:bf:b6:
         ed:c2:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:34 2026 by rpki-client