Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa
File:                     882d159c-de0a-3f49-8cc7-75226c1dc327.roa (raw, json)
Hash identifier:          0l7dr9SCSdqHNjShovhuvijZ25hA194Vqk7ubYwwvSc=
Subject key identifier:   0C:46:FC:D9:66:2A:0F:1D:72:C9:37:01:45:14:BF:5E:3F:73:10:29
Certificate issuer:       /CN=5524759a-2f0a-478f-8eb1-41f1b86353f9
Certificate serial:       010D0C9F4328584E7A64F7E7556DFC9976F04260
Authority key identifier: D3:89:58:66:39:44:CC:1D:B3:FE:EF:3D:F6:9E:37:BC:76:45:B2:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     399881
IP address blocks:        2606:4cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f7:e7:55:6d:fc:99:76:f0:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524759a-2f0a-478f-8eb1-41f1b86353f9
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=4fe987ae-1130-4596-9261-6b22ea79b2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:5c:83:62:1d:e5:8a:dc:6e:52:22:48:76:
                    22:da:e3:dc:14:61:9f:76:ee:b2:4f:ab:8b:cd:bf:
                    bf:76:8f:0b:33:a4:96:50:2f:1b:a0:8b:8b:7e:c8:
                    67:93:a1:c6:71:99:5e:e3:7f:65:33:d0:38:86:03:
                    80:d2:7e:8e:fb:9b:92:10:fc:7f:b8:47:53:77:c6:
                    35:3b:19:20:98:b6:31:a3:f7:50:4e:69:16:e2:f0:
                    f6:a0:d6:74:a9:42:de:3a:ee:f8:04:52:ab:67:0c:
                    5c:fa:92:2a:8e:c0:c3:f5:34:95:d8:eb:17:d0:9d:
                    20:29:26:08:9b:8d:e5:2d:45:d5:12:14:ea:cf:68:
                    dc:6d:35:53:e6:45:68:35:40:b0:ef:b6:f4:c2:49:
                    ac:8a:7f:d2:ef:16:3d:e4:20:24:a7:82:60:81:0e:
                    42:0e:f1:e6:70:85:52:95:55:99:64:de:8b:0d:40:
                    14:8f:9b:67:2a:07:f7:8d:a2:93:3e:3b:7b:0b:cc:
                    58:27:dd:55:ea:de:31:92:d4:17:9a:6d:8f:c7:97:
                    aa:aa:e2:13:a2:3e:d3:5e:db:32:0f:56:18:e6:71:
                    a5:74:bc:ee:5f:ea:3a:d9:1e:3d:fc:76:1b:f4:e1:
                    98:d8:52:b5:7c:e6:6c:e8:49:11:75:c3:99:7c:f0:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:46:FC:D9:66:2A:0F:1D:72:C9:37:01:45:14:BF:5E:3F:73:10:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.crl

            X509v3 Authority Key Identifier:
                keyid:D3:89:58:66:39:44:CC:1D:B3:FE:EF:3D:F6:9E:37:BC:76:45:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:05:35:f8:2b:0b:fd:da:e1:c0:30:ed:99:99:37:7c:b2:03:
         ab:ae:23:63:ca:d3:8e:d2:07:fc:ff:1c:82:e2:9b:78:79:2d:
         9c:b0:ba:79:e9:e5:59:1c:c5:12:88:f2:47:e1:2f:42:38:55:
         ef:53:cd:06:87:a2:8a:a1:83:55:12:99:6d:04:a6:46:d9:8f:
         7c:3a:cd:34:79:89:7a:2b:87:ea:0c:ef:9a:6a:47:66:1d:2c:
         2a:f5:a8:23:5c:e0:9f:af:93:e8:3e:1e:dc:8c:21:dd:95:85:
         6e:31:52:d3:17:51:58:a3:c8:54:52:fb:b8:23:91:66:f5:67:
         38:c5:9a:fa:2a:c5:5b:52:1f:00:8b:75:f3:e5:9c:52:28:ab:
         eb:6b:29:62:2a:fc:95:11:b9:ac:86:c6:9d:80:75:31:5d:19:
         fd:8d:d3:5d:86:c7:d3:fe:88:d3:25:3d:0c:ce:5b:da:08:f9:
         bf:9b:fc:e4:9d:26:58:01:a5:6b:d7:06:70:be:fc:bf:27:6e:
         8d:f4:85:68:1a:0d:cd:e1:f2:84:13:4a:cd:ef:1f:5a:ad:75:
         45:44:50:e0:3d:03:37:12:eb:0e:e9:45:c3:13:c4:84:aa:4e:
         dd:62:8a:a3:31:5f:7b:55:36:1a:da:24:3f:40:bc:52:10:e1:
         14:2a:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:22:26 2026 by rpki-client