Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7/55fa39ca-e319-3c66-b84f-5052b10c3c4d.roa
File:                     55fa39ca-e319-3c66-b84f-5052b10c3c4d.roa (raw, json)
Hash identifier:          flg4vOTzcWPXmtPWLyUTN6PexJzwv8yerX2ov34HGwE=
Subject key identifier:   03:9F:90:82:57:12:4D:40:61:D2:6F:97:29:A9:1A:88:80:71:82:89
Certificate issuer:       /CN=75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7
Certificate serial:       010D0C9F4328584E7FFA54693FC8468CC921D580
Authority key identifier: DD:43:94:79:BD:FD:DB:76:5A:BE:22:C4:6D:9A:E2:F6:43:9B:9B:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7/55fa39ca-e319-3c66-b84f-5052b10c3c4d.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     402157
IP address blocks:        2602:fefd:e20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:54:69:3f:c8:46:8c:c9:21:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=4d8ad1f4-bb2e-4214-ae04-fa93799187f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:02:ae:03:5f:64:b7:e3:96:52:10:ce:10:
                    5c:d3:2e:30:ba:a4:8b:26:15:e5:d5:61:02:f9:80:
                    41:16:09:9d:4c:ec:69:fd:d2:b4:54:6a:c8:8d:46:
                    bd:c3:1d:a5:b0:ae:24:dd:6c:da:98:81:26:e9:19:
                    bf:01:82:01:31:68:a5:dd:fe:2c:34:29:c4:e2:21:
                    8e:65:76:fc:ea:79:bf:a9:56:ff:1f:79:c5:c1:69:
                    7f:83:6c:20:b0:22:9b:7d:c9:b3:ac:72:1f:ec:a7:
                    e8:84:db:84:ca:78:ab:a2:da:1f:8d:cf:a4:9b:f6:
                    38:fd:c1:95:99:cf:14:10:64:34:9e:26:2b:68:41:
                    8c:91:ac:57:66:01:df:90:c9:b5:c6:ac:e7:b6:7d:
                    a4:fd:84:d3:db:3f:31:44:d7:38:72:0a:6e:bf:0b:
                    13:f7:48:20:60:6d:03:a0:3b:f7:01:b4:29:ec:3d:
                    49:5e:0e:cc:2e:af:25:20:b2:f7:6b:83:c8:52:7d:
                    91:c4:74:d1:e8:e6:56:b6:3a:79:a3:a3:07:51:fd:
                    7f:b6:8e:68:2d:9c:9a:e7:c7:43:38:7d:ea:e1:aa:
                    fc:a1:14:41:98:63:ad:ec:b4:83:29:a1:f2:60:c4:
                    de:1f:81:8c:4d:b9:27:e1:32:b1:ea:70:cc:fe:74:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:90:82:57:12:4D:40:61:D2:6F:97:29:A9:1A:88:80:71:82:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7/55fa39ca-e319-3c66-b84f-5052b10c3c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7.crl

            X509v3 Authority Key Identifier:
                keyid:DD:43:94:79:BD:FD:DB:76:5A:BE:22:C4:6D:9A:E2:F6:43:9B:9B:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75bda26f-ccab-4fab-bcc3-1bc16f5b7ad7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fefd:e20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:38:da:1d:c7:4c:e7:3d:2e:ac:77:15:39:04:95:a5:56:
         be:48:da:3a:19:89:0c:d2:4b:2d:37:94:f1:fa:30:3c:94:b0:
         b1:d4:69:d8:79:59:26:81:8c:c9:24:aa:81:00:e8:ef:7a:14:
         d0:b9:19:02:0c:8d:45:ad:ab:54:66:5b:22:3f:48:74:8b:25:
         7a:02:8b:7e:5e:40:8c:5d:0e:b0:14:37:6d:56:4d:f6:b0:14:
         c7:2e:25:7d:38:88:ff:d5:48:9a:b8:00:69:0f:4f:ba:d7:98:
         e3:a8:9d:6c:de:d2:8d:3c:ec:0d:9b:47:d4:fd:43:65:11:b5:
         6a:40:73:89:6b:11:32:77:91:01:17:f7:cb:a6:ee:8f:8f:92:
         a5:c4:eb:25:17:d5:28:73:c9:37:38:ec:11:e4:2f:22:80:ae:
         e3:44:8e:aa:2f:33:c0:df:8c:70:62:54:11:f1:1e:f9:dd:d8:
         bd:21:e8:c5:34:5e:5c:a1:9b:10:3d:df:d9:56:54:bc:44:83:
         84:fc:1a:24:6d:8a:29:9f:cb:9e:63:f5:53:ae:d6:2c:c3:e0:
         b8:6a:47:ef:c9:44:80:f7:ac:21:74:02:1c:25:d2:07:21:3a:
         b7:ea:c4:46:1f:dc:67:c4:c2:e5:81:3f:5b:86:de:18:6b:c4:
         73:f8:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:03 2026 by rpki-client