Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa
File:                     b87d1157-6514-3d18-8122-844af2b4950b.roa (raw, json)
Hash identifier:          nb+7gQXp9muea6UYJoH3BuPwD/epajtCeNHf46mSLIU=
Subject key identifier:   57:58:AF:6E:CC:0B:01:B6:67:72:A7:61:6F:51:2C:4D:31:75:F1:31
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EA79503DD9F9632749A304780
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8987
IP address blocks:        2605:4300:2c21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:03:dd:9f:96:32:74:9a:30:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d416f116-60e1-4091-b890-e14fe1e8d6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:29:24:c5:e8:e0:b9:e6:32:44:06:68:f4:
                    91:c3:5a:bc:cd:43:c0:b1:11:c5:8b:df:f1:85:2d:
                    7f:5e:19:a6:a2:fc:d0:62:f8:33:e1:a7:c9:26:16:
                    32:30:08:d3:5b:3c:9f:67:a1:b9:f8:20:9e:6e:98:
                    35:d4:d0:68:c1:8a:60:5d:ee:01:95:7b:38:87:9d:
                    ca:99:38:8d:86:e3:da:e3:56:59:a9:ac:ce:92:20:
                    68:ec:18:5f:bc:b1:0e:d6:ae:88:70:1f:d4:37:b1:
                    e8:1a:7d:bc:5a:12:88:b2:9c:46:6e:2e:79:55:fb:
                    fc:5a:a7:b7:dc:f8:84:23:17:fa:cb:6f:6a:99:72:
                    77:7e:04:e2:0d:dd:63:e7:6a:a0:ce:a8:fd:6c:0b:
                    0d:d0:7c:bf:ad:18:42:3c:09:d4:cd:a6:d9:67:fb:
                    ef:6f:55:d5:13:b3:f5:14:a1:36:41:e0:ba:9b:23:
                    80:12:99:f2:17:b0:ef:3e:e2:19:d5:a8:27:4a:2a:
                    97:cd:23:d6:03:80:6b:1e:92:cc:74:0b:f0:11:08:
                    64:db:5c:55:e1:57:66:64:c9:b5:52:ca:27:a4:11:
                    64:d3:b4:d3:2f:4b:0b:00:1a:7e:48:5e:eb:2b:89:
                    3d:70:3e:a6:28:f0:c7:81:df:f5:05:3d:b0:57:97:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:AF:6E:CC:0B:01:B6:67:72:A7:61:6F:51:2C:4D:31:75:F1:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:0a:ce:c2:64:ad:bc:f7:2a:9a:18:0e:dd:e5:22:38:a6:
         70:23:74:88:55:fc:dc:d3:56:c7:ce:e8:42:9f:4d:36:7d:61:
         37:6a:5e:2c:57:2b:c3:fc:1f:9c:86:61:27:bb:3a:e0:5a:e2:
         8a:eb:0e:2d:47:3c:97:c2:09:9c:98:97:8a:f5:bd:a5:cd:d3:
         0e:59:07:7e:9f:ef:31:7d:c2:02:4c:cb:29:72:30:49:d8:d1:
         c9:74:47:1c:e0:39:e7:d3:01:21:a1:77:9e:c1:21:70:be:3c:
         e3:4f:ed:c1:9b:af:8f:1d:ed:4e:24:08:6c:d8:db:52:09:1a:
         39:e8:c8:c4:7e:25:f9:80:99:26:d2:0f:ee:62:54:4b:91:8b:
         32:1f:51:fd:51:81:6a:76:91:35:ed:9d:ef:76:ff:62:6e:7c:
         e5:28:3d:07:6a:30:d8:6a:f4:aa:8d:2f:c3:b0:2b:a4:19:8a:
         ff:83:e1:fb:dd:8f:3d:d1:56:e5:55:3b:65:f5:24:0b:74:b2:
         49:b4:25:7e:3d:31:c5:5e:3a:8e:b0:73:54:cb:92:d7:0e:60:
         a2:23:39:dd:57:74:92:e9:95:c6:31:72:db:22:0c:f1:50:84:
         d1:0a:98:b8:6e:ab:bf:7e:71:11:ba:f0:df:c8:76:32:10:63:
         b6:c7:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 01:14:28 2026 by rpki-client