Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/e10b4c53-9d94-34d4-b068-ce95861b6c57.roa
File:                     e10b4c53-9d94-34d4-b068-ce95861b6c57.roa (raw, json)
Hash identifier:          DQgR1aIu0dQVEoK26fWwlSQfaHFjS5RntbknqXl0nJ0=
Subject key identifier:   DA:98:66:96:7D:4D:7B:91:E9:6D:7F:2C:F5:CF:C7:21:76:90:43:92
Certificate issuer:       /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e
Certificate serial:       010D0C9F4328584E7E94DE5ECA39F4AFB5106600
Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/e10b4c53-9d94-34d4-b068-ce95861b6c57.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     21939
IP address blocks:        2602:f586::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:de:5e:ca:39:f4:af:b5:10:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=87832401-c73f-4e9c-a2ac-5f1c568375db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:19:cd:25:ad:11:c0:1c:d7:23:d9:81:bd:3f:
                    fb:1c:ec:b0:31:50:f0:5d:96:e4:ef:cf:1a:dd:0d:
                    cf:c2:e6:dd:cf:78:4a:b2:da:5c:60:4f:ed:ce:55:
                    84:63:6d:d5:12:9e:2b:fa:38:82:6f:3e:ba:f2:29:
                    99:1e:bf:0e:2c:92:63:fc:34:85:4b:99:55:c5:3c:
                    b7:1a:03:b7:35:ef:22:f7:5c:25:24:4b:4b:b7:46:
                    45:19:ba:ca:a5:49:d8:00:e1:96:6c:c9:9b:3c:d7:
                    18:f1:ed:70:fb:09:0d:50:a7:34:0f:bf:58:1e:4d:
                    a7:92:47:a4:55:35:bf:fa:bf:10:84:47:c2:8d:17:
                    01:75:fe:9a:71:56:af:1d:83:65:f4:96:38:d3:f4:
                    12:ac:14:aa:6f:e6:48:a1:0b:50:69:4e:e0:2d:a8:
                    cc:cd:d7:4f:dd:f9:b5:09:7f:4c:67:43:3b:79:0d:
                    c2:1b:28:09:4b:b4:f0:a9:07:3a:35:c3:5f:ca:32:
                    93:cc:f8:75:b5:75:77:6f:f1:44:04:ab:f6:c2:a9:
                    5e:3e:60:62:2b:1a:61:a5:d9:3f:b7:ef:28:be:3d:
                    94:cb:d7:23:21:66:ab:7c:6d:06:7f:85:ee:6a:89:
                    13:33:fb:0c:4c:fa:c0:5a:cf:45:45:73:03:63:13:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:66:96:7D:4D:7B:91:E9:6D:7F:2C:F5:CF:C7:21:76:90:43:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/e10b4c53-9d94-34d4-b068-ce95861b6c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl

            X509v3 Authority Key Identifier:
                keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f586::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:44:65:81:a0:0a:76:8a:8d:2f:4d:bf:64:cc:bb:64:6f:60:
         58:9d:c4:80:b4:7b:8c:64:fe:39:05:e0:5f:17:15:a9:6d:3e:
         fe:59:88:eb:75:62:06:26:20:a2:45:bb:96:4f:74:16:96:16:
         14:b2:09:51:2e:b2:14:30:ca:7a:c4:89:a6:a3:21:f0:1f:b1:
         bb:2c:98:de:7f:02:16:1b:43:ef:ce:0d:b4:7b:27:29:bf:48:
         69:5a:ae:83:a2:33:3d:67:2e:bd:b1:58:ba:de:bd:6f:6f:8c:
         92:07:00:87:68:a1:a8:36:3d:98:dd:0e:af:64:70:32:07:80:
         c2:23:9b:f2:a8:a3:68:1a:4a:73:5d:03:43:8d:03:d5:b7:be:
         1a:8e:8d:77:23:ba:9b:4d:ef:41:89:84:65:e9:a7:e7:fe:ce:
         bf:ba:f1:ee:1c:c9:d0:cb:10:65:bc:99:09:3e:f8:5e:ac:29:
         bc:91:d2:00:57:7d:78:c7:19:55:cc:37:87:05:43:32:5f:ae:
         d5:12:63:c7:39:34:9f:d6:69:be:2d:f0:7f:da:4f:62:f2:61:
         03:2e:07:65:19:af:95:fa:44:9b:00:0b:bb:55:57:29:11:e8:
         ff:4e:57:4d:5f:e8:bd:d3:2e:0e:57:0e:6d:fa:34:80:5e:14:
         9c:d6:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:41 2026 by rpki-client