Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de1f0ef0-e5b7-334e-8d05-22247b1d34b4.roa
File:                     de1f0ef0-e5b7-334e-8d05-22247b1d34b4.roa (raw, json)
Hash identifier:          5DC4rq+QwMfCt3eTlQKova1D6K2JBzjo9RrRB+oAIpc=
Subject key identifier:   AE:37:C9:DB:0E:7E:F3:EC:6A:BD:48:99:B0:A2:0E:BB:C9:1C:7C:D9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FCC23CDD8B37E50FF4300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de1f0ef0-e5b7-334e-8d05-22247b1d34b4.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     855
IP address blocks:        2001:4c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:cc:23:cd:d8:b3:7e:50:ff:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=79d3623f-d0ba-4e42-97c3-5832e60d3c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:06:af:a0:9d:16:90:4c:ec:39:27:85:02:26:
                    49:3c:4e:0b:6f:ad:d0:38:70:a2:e1:ed:35:98:40:
                    e9:31:ed:f4:bf:72:f3:f5:0a:86:c4:69:81:4a:27:
                    6e:63:bb:33:f5:23:f8:32:d1:08:24:76:51:3f:c8:
                    cc:fa:31:f0:33:ad:96:3f:56:5d:8a:5c:d9:f4:11:
                    a8:21:7e:06:08:c8:b4:04:86:54:c1:62:cb:22:f0:
                    a3:a2:33:f8:8e:1f:d8:5a:b6:20:64:4f:19:94:9d:
                    8d:f6:54:6d:00:05:05:ff:69:89:90:62:eb:1b:92:
                    9b:85:2e:8a:71:5a:a9:b2:92:fc:4d:5b:58:b5:60:
                    ea:36:09:a2:e3:ee:fa:dd:ca:66:ca:3d:32:5e:a6:
                    44:69:5e:53:8a:6b:06:d8:1f:85:30:8d:ed:fa:4a:
                    85:eb:98:35:84:ae:4d:bf:90:3b:0c:ff:74:d0:67:
                    36:c9:f3:5a:74:70:3e:31:ff:75:c3:1b:6a:a8:7b:
                    ac:57:61:7a:d7:bd:a7:63:8c:dc:6b:d9:28:34:d2:
                    2b:a6:47:5a:c1:e0:0b:90:da:68:4e:1d:df:d8:fa:
                    6a:98:6e:29:06:37:22:e0:c8:fc:71:81:5a:c5:43:
                    f3:c7:fb:06:e2:0f:26:6b:19:f4:e6:3e:cb:55:c5:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:37:C9:DB:0E:7E:F3:EC:6A:BD:48:99:B0:A2:0E:BB:C9:1C:7C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de1f0ef0-e5b7-334e-8d05-22247b1d34b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:90:0b:6b:c5:68:a2:75:31:d8:11:24:8c:ff:d5:5c:ca:1a:
         65:21:d7:d7:3d:a0:58:62:76:d7:75:49:41:65:e5:9e:c3:66:
         21:54:2c:e3:f1:72:44:3f:50:ea:b1:0a:60:d9:fd:af:43:f4:
         f4:ed:b8:69:fe:3d:94:c8:00:af:90:88:86:e2:4a:be:d0:eb:
         40:df:4f:9f:f5:8b:1f:4a:1e:61:4c:db:4a:b3:fc:48:27:7a:
         ba:b1:27:be:e5:cb:a8:26:ff:a0:09:18:a1:2d:45:19:59:ed:
         69:c9:6d:99:f0:a9:65:56:fd:46:d3:8f:f6:a7:c1:cb:29:03:
         b6:f7:76:b1:83:8b:16:3f:b2:7f:05:5f:14:79:ea:0d:f9:b5:
         88:1b:29:d0:5b:48:90:b3:e8:d5:09:4d:86:94:88:88:9c:3b:
         be:80:0e:5c:cc:13:a0:16:02:7f:83:a5:3d:f5:0b:22:3c:ae:
         41:4b:96:9a:1e:85:42:31:5b:fe:53:be:2d:04:38:44:24:47:
         60:40:16:77:67:90:48:27:38:ba:b8:a8:4d:59:bf:90:a2:55:
         58:c1:c5:16:c3:ab:f3:e4:6c:2c:e3:7f:09:06:07:ee:4c:99:
         2b:81:13:77:03:18:28:b9:83:9d:b6:ce:7b:45:c8:5a:ea:ac:
         ac:b9:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:28 2026 by rpki-client