Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/153c8f8f-911c-3e7b-a1b2-847b48cc58d1.roa
File:                     153c8f8f-911c-3e7b-a1b2-847b48cc58d1.roa (raw, json)
Hash identifier:          0KrNOkhhQp9NW95KBexyPgg47o1hlRxwPkPnGr6nYRM=
Subject key identifier:   05:E5:1C:8A:F6:9D:4D:55:63:48:96:B5:94:D3:2A:CE:F7:B7:82:AF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E90499677BBD4781DF5056980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/153c8f8f-911c-3e7b-a1b2-847b48cc58d1.roa
Signing time:             Mon 20 Jul 2026 17:13:11 +0000
ROA not before:           Mon 20 Jul 2026 17:13:11 +0000
ROA not after:            Sun 18 Oct 2026 17:13:11 +0000
asID:                     11798
IP address blocks:        2604:ba00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:49:96:77:bb:d4:78:1d:f5:05:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 17:13:11 2026 GMT
            Not After : Oct 18 17:13:11 2026 GMT
        Subject: CN=e67a8b09-a553-4f78-81e6-0550e48ee7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:fb:be:01:e1:64:31:89:a6:94:81:3c:80:
                    7d:a1:32:0a:4b:21:99:04:3d:66:e7:75:d9:23:8c:
                    33:2b:98:c6:91:49:a7:bb:a2:1f:c6:d0:b5:44:82:
                    8d:88:22:79:d3:8b:5d:8f:6d:a5:d6:ac:b0:33:a0:
                    3a:da:a2:55:71:43:c4:c4:1a:d3:84:fb:ee:51:d1:
                    1e:ab:88:e0:39:19:79:0a:7d:5f:3c:e7:da:6b:d1:
                    cf:6c:1b:19:d1:1e:fb:aa:65:f0:a9:98:66:04:cb:
                    19:42:a0:2f:ec:0a:87:e1:2f:f2:4b:03:0f:c9:b0:
                    1f:8c:44:72:8f:9b:ad:68:13:3f:bf:78:bd:39:2e:
                    ae:19:62:a9:b8:dd:a5:6f:49:c0:ae:f9:11:2a:b0:
                    25:99:7f:42:38:65:a4:4b:73:a6:16:96:1b:2e:d8:
                    5e:07:bf:db:80:08:fa:0c:5a:96:ea:70:3a:46:cf:
                    84:21:28:b2:f8:00:ec:c7:5d:16:d9:6f:a5:db:6d:
                    eb:fb:2a:bb:f7:2a:ea:e6:a2:99:32:e9:98:36:6e:
                    db:f2:97:46:e5:60:b9:d4:1e:cf:ea:5f:cd:c2:cc:
                    93:c8:89:2a:d7:78:b1:33:bf:37:18:e9:54:42:17:
                    c3:49:85:f7:b4:d0:47:6c:3b:ea:da:f0:b2:46:e1:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E5:1C:8A:F6:9D:4D:55:63:48:96:B5:94:D3:2A:CE:F7:B7:82:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/153c8f8f-911c-3e7b-a1b2-847b48cc58d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f5:d3:17:5c:9d:d7:63:08:86:2b:fe:3e:6f:77:7a:c5:81:
         1a:d1:53:0d:24:70:85:da:bc:b6:b1:71:29:95:21:b1:a5:86:
         ba:21:fd:ed:74:5b:a4:17:2d:b0:b9:95:b8:0e:5c:01:04:da:
         8d:55:12:5f:cc:2c:d6:ad:63:2a:72:33:e0:24:71:48:1e:20:
         fd:98:04:5f:fa:8c:d1:3b:ee:4d:dc:0c:c8:83:46:2a:c9:47:
         02:12:68:4d:1d:26:49:5a:44:df:1a:4b:49:c0:23:7d:63:4f:
         f1:2c:68:51:bf:60:9a:88:d7:ba:71:59:24:fa:a0:0e:7f:4a:
         31:8d:18:15:1a:e3:42:39:64:c0:66:67:e3:28:f3:1b:f3:7e:
         21:4d:2a:3c:be:7a:4c:8b:61:cf:f2:f8:99:c1:02:27:70:88:
         1d:10:88:d4:6d:2e:65:a2:eb:a7:d5:77:07:9b:70:06:2e:fc:
         a4:51:24:d1:84:9a:18:98:6a:f7:fe:ea:01:aa:85:e2:19:c3:
         68:d7:56:6d:b1:18:fc:10:04:cd:a4:98:2f:23:79:2a:bf:7c:
         cf:48:2c:f4:53:05:25:f6:a8:33:80:ea:d3:05:dc:bf:65:2f:
         1c:fb:8a:e6:c3:6a:62:18:55:56:c5:80:fb:88:6c:49:af:9e:
         ef:5e:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:19:34 2026 by rpki-client