Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83a1420f-8ab2-3a9c-9063-591c94b0e1db.roa
File:                     83a1420f-8ab2-3a9c-9063-591c94b0e1db.roa (raw, json)
Hash identifier:          r8901udAUPC967yO0lEH42pNBPZ6ZeOhURQyb1rrhgs=
Subject key identifier:   E6:BB:EF:A0:3A:87:0E:F1:65:04:52:81:2F:23:75:99:92:AC:EA:4D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E904A1E0286A150F4D46A9900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83a1420f-8ab2-3a9c-9063-591c94b0e1db.roa
Signing time:             Mon 20 Jul 2026 17:14:15 +0000
ROA not before:           Mon 20 Jul 2026 17:14:15 +0000
ROA not after:            Sun 18 Oct 2026 17:14:15 +0000
asID:                     30218
IP address blocks:        2604:ba00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:4a:1e:02:86:a1:50:f4:d4:6a:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 17:14:15 2026 GMT
            Not After : Oct 18 17:14:15 2026 GMT
        Subject: CN=1db4dd24-e19b-44e1-be4f-5fa0d6d42dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:62:c9:65:38:13:a1:57:a3:61:a6:40:d0:0b:
                    1d:30:64:40:4b:7d:e6:f5:f6:3f:98:5b:14:8a:96:
                    71:7c:46:25:1b:c0:fe:7b:c4:05:25:47:a9:5a:ef:
                    4e:e0:34:28:7f:0d:56:4b:ef:16:ce:ec:ba:60:99:
                    f5:1c:3d:70:d1:10:6d:c9:19:9f:aa:a8:76:54:0b:
                    b1:c0:b2:be:79:ef:4a:64:92:82:3e:3f:e7:9b:09:
                    cc:ad:6b:d8:14:24:f9:ea:bc:2c:47:73:e8:cf:4d:
                    47:e5:ae:e0:b7:fa:e9:23:5f:6e:ac:c5:49:e2:26:
                    5b:25:92:e0:0f:84:95:a9:45:29:86:23:d2:6f:6a:
                    e6:d8:44:fe:b2:36:c6:ab:c8:8b:bc:fc:64:38:93:
                    c4:26:6e:65:f7:06:55:6c:2e:b4:b9:d5:18:fd:e9:
                    d1:30:df:7f:5d:9e:e4:e7:60:d6:d9:6d:92:c3:5a:
                    dd:28:e2:b5:bc:18:81:ce:77:94:6e:a6:dc:5c:e3:
                    4a:5e:f5:89:3b:8a:01:85:77:3a:93:fe:fd:aa:b7:
                    f5:2b:26:af:4d:51:66:1a:68:16:ef:f5:5b:34:3e:
                    1d:ee:52:71:fb:bf:ac:27:d3:ac:b3:f0:de:35:5d:
                    0b:22:88:3e:52:82:3e:30:7c:f2:01:ff:49:14:b8:
                    0f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:EF:A0:3A:87:0E:F1:65:04:52:81:2F:23:75:99:92:AC:EA:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83a1420f-8ab2-3a9c-9063-591c94b0e1db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:96:a3:33:87:3a:0e:d7:17:5b:b9:aa:4e:5c:3e:59:8f:ba:
         3f:03:42:e2:f3:1d:e4:f2:15:e1:68:b9:db:54:50:4a:c4:c7:
         85:b0:0d:87:b4:6a:9d:cb:c3:ed:5b:85:ef:a7:05:f9:ec:bc:
         f1:21:4d:7a:f2:0e:76:46:f0:94:28:2e:88:fb:b2:5d:a1:b4:
         5c:e9:b1:87:d2:cb:14:e6:58:14:03:4e:fd:e6:be:c5:de:6c:
         3b:3e:26:a2:88:a3:c2:5c:34:0e:7f:70:43:5d:7e:3a:44:2b:
         59:b8:b2:61:a5:ee:8a:cf:f1:f8:3c:33:fd:3e:12:45:ce:2e:
         42:c3:f6:f8:e1:05:0e:c1:bf:16:ff:47:52:a0:6c:36:32:37:
         8f:80:b7:9f:5f:70:d9:3e:cd:af:dc:ec:d0:c6:41:fb:7f:d0:
         37:f1:f4:6d:c2:8e:4b:91:36:9f:53:39:31:8e:6e:22:dc:57:
         3d:29:9a:77:58:a5:5b:4a:89:f9:36:9f:fd:9f:c3:c2:0e:ad:
         0e:fc:37:74:2f:79:bf:ef:a5:2e:6d:d1:b8:1d:85:84:09:dd:
         a0:b4:6c:f3:25:38:7a:49:f9:ee:d5:9f:81:02:b8:a2:c5:69:
         1c:5a:07:52:02:5d:6b:13:41:c5:fc:97:0d:3b:9b:fb:d7:a3:
         81:bd:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:20:08 2026 by rpki-client