Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/4c12c77d-1c35-3c84-be55-a195afe9bb73.roa
File:                     4c12c77d-1c35-3c84-be55-a195afe9bb73.roa (raw, json)
Hash identifier:          w0mwycZeq98sFH5BDxuI89VZL9ZVtLwZjS9btGbbJ4Y=
Subject key identifier:   65:31:79:C7:8D:DA:6D:95:12:96:90:53:7C:5F:56:44:A4:1B:25:F3
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584EC0A7652528AC315E4DFD5F60
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/4c12c77d-1c35-3c84-be55-a195afe9bb73.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     22140
IP address blocks:        2607:fb90:c13e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:65:25:28:ac:31:5e:4d:fd:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=85c15fef-c5f5-4b3c-bc2e-8393b15988c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:03:5c:89:22:62:6b:f5:b8:7a:2b:7f:88:
                    3a:b5:2e:07:d6:9d:aa:c5:89:12:b4:88:50:ad:33:
                    77:96:bf:87:d4:ce:5d:36:97:9b:16:75:02:87:91:
                    d0:2c:dd:5c:47:71:35:61:64:a8:14:9c:52:94:4e:
                    8a:0c:5e:ab:95:6e:ce:54:4f:6a:5f:1c:9d:67:8e:
                    f6:89:7e:f2:a5:36:84:96:b7:f8:4b:41:54:e3:fd:
                    49:d3:1d:a1:d5:23:d2:28:97:2b:d0:7a:f5:a5:50:
                    6c:ec:93:b6:27:77:2b:cd:e9:1b:d4:3e:95:e7:7b:
                    85:ff:15:ad:07:d1:8a:66:39:99:d4:f8:0a:95:cf:
                    6a:fa:ce:68:e0:1d:03:80:86:b2:84:be:fb:c2:22:
                    e3:e9:5b:39:13:5d:d2:7e:57:78:00:bb:47:3b:39:
                    16:9b:24:e9:6f:63:ef:73:74:bc:c3:49:75:f0:f9:
                    8c:99:40:a9:02:38:6b:3a:c6:2d:d7:1c:14:05:40:
                    3b:45:0a:0f:02:46:f4:1d:c7:b7:c1:35:39:2b:9e:
                    ab:4b:81:bb:5e:45:b5:cb:8f:b6:e7:51:c1:53:32:
                    a2:b6:82:73:4d:eb:92:f4:c4:02:40:8a:7b:ee:4a:
                    32:c6:f0:5a:d0:a3:bc:aa:0a:15:39:c4:63:ed:47:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:31:79:C7:8D:DA:6D:95:12:96:90:53:7C:5F:56:44:A4:1B:25:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/4c12c77d-1c35-3c84-be55-a195afe9bb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb90:c13e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8d:e5:ca:85:44:e7:11:e3:a5:dc:0f:39:f0:5d:10:43:a6:
         53:e3:29:de:66:40:08:79:56:68:e8:f4:70:f4:12:94:88:b6:
         4c:49:27:34:29:f5:48:74:70:ff:af:70:3c:9f:c6:42:7e:d8:
         ac:b8:25:52:74:b9:34:e7:0c:51:65:07:fd:c1:b9:77:c6:6f:
         e4:46:62:34:2a:3a:07:7f:7a:79:6f:71:6b:43:a7:a8:c5:9a:
         92:bc:29:51:9f:fa:11:5a:d2:8c:a7:66:0d:dc:0a:ab:11:e1:
         5e:0e:a4:6e:a2:cc:1e:10:e1:c4:44:94:f5:3a:e9:63:7e:3d:
         93:ba:8a:c6:ac:78:81:d2:a3:ed:34:59:38:e9:04:61:24:d7:
         84:23:bc:95:a0:15:fb:10:1d:a6:e3:de:28:4e:a3:be:40:11:
         16:13:9a:98:05:eb:8e:4b:29:f1:68:ae:fd:8f:55:c9:a3:b0:
         27:13:63:0c:04:f0:67:88:bb:69:92:47:ea:7d:49:b8:b9:6b:
         5a:39:e7:b7:63:f5:ff:f0:b8:14:c9:62:2f:7f:9b:d4:bb:d4:
         0f:14:9e:e6:cf:a8:36:23:07:3b:90:f0:20:de:d5:7c:02:d9:
         f3:e3:c4:b2:f7:9e:38:25:91:24:c0:98:5e:3b:2a:06:8c:ce:
         e6:78:fa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 08:56:56 2026 by rpki-client