Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/3b10b129-b4d0-3a8a-8c2b-5ade9582e720.roa
File:                     3b10b129-b4d0-3a8a-8c2b-5ade9582e720.roa (raw, json)
Hash identifier:          AHhYBhAJM1i3iME1URYGprinErk3dQgoymp8AtvSlQ4=
Subject key identifier:   9C:71:FA:96:2F:3B:30:5E:DF:EC:67:0D:8F:4D:BF:36:F9:25:32:FE
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584E37647A1656A87CDBEFC95080
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/3b10b129-b4d0-3a8a-8c2b-5ade9582e720.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        2604:bc40:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:7a:16:56:a8:7c:db:ef:c9:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=fa82d8a4-f053-42b5-a41c-d427725d4217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:c6:94:08:45:aa:be:0e:d3:c0:3b:0d:ce:
                    ad:40:3c:cd:fa:20:01:12:f1:8e:c6:a2:b2:79:4a:
                    79:b0:cd:54:df:4b:7e:11:7c:c3:f9:64:15:52:9f:
                    f8:96:e8:80:fc:28:7d:7f:6e:43:66:f9:e1:de:dd:
                    98:5e:cd:61:37:b5:58:1b:92:7e:b4:7d:d7:50:88:
                    d6:03:05:89:8c:e1:c6:70:86:82:af:81:2b:11:b0:
                    10:9c:b2:78:6d:40:1e:90:19:90:9c:f4:34:8f:07:
                    3c:e6:c7:9c:02:b5:78:21:5d:27:b6:8b:9e:cd:48:
                    f7:84:60:65:71:8b:40:12:16:83:f2:84:bc:f6:80:
                    ea:95:73:3c:17:0a:d1:a9:e0:4c:cc:23:b0:01:40:
                    cc:8e:ab:08:4b:47:b6:e4:24:48:9a:93:b4:e0:37:
                    7f:b2:5c:ac:82:44:05:44:c7:39:ca:1f:99:28:e2:
                    df:3b:a1:f8:fa:25:c1:f1:f8:1e:7a:52:99:61:85:
                    56:82:6a:35:13:87:4d:fb:ac:d8:e0:14:a5:0f:d9:
                    8b:b9:38:88:96:89:6f:7b:fb:ee:83:59:5b:87:99:
                    42:25:5b:70:94:7e:c1:98:55:6d:03:c6:ae:f0:5b:
                    0b:e4:bb:6f:db:df:d2:8b:f0:b2:7a:6c:3f:c6:ae:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:71:FA:96:2F:3B:30:5E:DF:EC:67:0D:8F:4D:BF:36:F9:25:32:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/3b10b129-b4d0-3a8a-8c2b-5ade9582e720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc40:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:20:b0:73:2a:36:1a:75:d8:9d:69:e8:34:ee:11:b8:76:
         c3:91:a2:c4:9d:58:94:4b:84:f8:a4:8b:82:58:af:97:58:d6:
         f9:da:7c:de:67:32:5e:76:00:8e:dd:fe:a8:a9:13:07:f1:9e:
         7b:4f:aa:5a:cf:73:90:ff:fe:72:ab:77:4b:a4:88:d7:cc:bb:
         66:c3:0b:da:f1:01:26:b4:93:43:50:fd:13:9f:d3:37:8b:3e:
         1f:19:b1:a5:91:11:b0:f4:18:28:7e:2d:25:a0:86:82:54:62:
         a2:83:83:b1:db:f8:9a:88:05:96:17:2d:f6:dc:1a:2c:f0:4c:
         e7:7a:c6:6a:da:f0:c6:4a:d9:ab:05:e3:d2:db:9a:41:61:b4:
         ac:4d:db:47:24:60:db:c3:5b:91:7d:d6:58:30:8b:d4:6c:f2:
         cd:bc:75:4f:ea:33:c7:ce:b6:74:80:83:b0:01:2c:f8:8f:33:
         cb:48:5e:b0:11:03:4d:94:41:21:d2:b7:8d:38:70:8a:67:1e:
         2d:74:d3:ac:e5:d0:59:d6:d4:10:f7:66:ce:1f:10:ff:06:7d:
         77:df:5e:15:3f:82:36:26:01:c4:9c:d8:e9:b3:9c:1b:4f:63:
         38:e5:ac:b7:e0:8f:8e:c2:6a:d8:a3:ad:b2:f4:bf:bb:af:7c:
         fd:c3:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:53 2026 by rpki-client