Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d47632ad-7d96-3e43-8cf8-52c716a229fc.roa
File:                     d47632ad-7d96-3e43-8cf8-52c716a229fc.roa (raw, json)
Hash identifier:          Ea3Jl4R2WKtcnDNOH1IeRS4lgo0efZcJcbmh7BWxv7E=
Subject key identifier:   E9:B8:23:46:78:C2:22:04:6B:E3:07:95:4D:16:D4:4F:B9:17:DC:61
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E5FDF6123E9E6C0FC34E71A80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d47632ad-7d96-3e43-8cf8-52c716a229fc.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        2001:418:4001:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:61:23:e9:e6:c0:fc:34:e7:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=bc6272af-a6eb-423b-9748-f08533c9a0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:aa:d3:65:33:23:99:40:bc:47:44:66:a4:
                    a4:29:39:5b:81:4c:0e:86:0e:86:8d:57:7c:1f:9d:
                    f8:cf:a8:97:58:8b:a1:b2:9f:45:58:a2:45:c5:6d:
                    96:9f:37:b9:2a:3d:72:7a:45:03:2e:37:18:42:0a:
                    79:66:52:92:5d:9f:b7:b6:74:3c:44:ae:cf:c9:85:
                    c5:04:5d:f9:77:5b:43:16:fe:e4:3b:7f:fa:2c:d2:
                    c0:a2:17:03:92:b3:ee:ff:06:eb:f9:8d:90:27:a9:
                    4c:2c:81:10:a7:a9:ee:ff:7e:25:d4:81:af:44:86:
                    51:57:e3:0c:77:4c:16:56:df:c0:b6:96:a6:cc:a7:
                    53:61:9b:30:f2:f7:a2:82:6a:a8:7b:ec:5f:a0:f7:
                    0b:8f:df:9c:f2:d7:1c:a3:34:ec:09:d6:88:cd:e3:
                    01:8f:d6:0f:a4:82:a9:1e:c5:a0:17:1a:78:de:b8:
                    6d:de:66:c3:ab:92:f7:97:42:9b:cb:b0:ae:ab:b2:
                    99:5d:f9:f7:5c:c3:c5:3c:56:91:2d:b4:59:f0:b7:
                    b3:58:cc:f5:06:4f:bc:a7:6e:63:0b:da:bb:3c:97:
                    cf:8c:86:67:6c:5e:1a:f3:7a:8c:65:5f:42:aa:ec:
                    40:e5:52:0e:f9:fa:f2:68:ca:9e:a0:24:61:be:46:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:23:46:78:C2:22:04:6B:E3:07:95:4D:16:D4:4F:B9:17:DC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d47632ad-7d96-3e43-8cf8-52c716a229fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:4001:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a3:49:9f:fc:a3:c5:e2:75:79:f0:16:8b:78:dc:11:ef:00:
         9b:47:f7:5d:bc:aa:a0:c8:94:a8:84:f9:ff:9e:6f:2b:e0:d0:
         ea:e1:c8:6c:44:c5:e6:0d:8c:84:1c:81:de:b0:14:1e:da:33:
         0a:e6:21:3d:cd:4c:a8:71:5b:89:4f:7a:20:73:a6:3a:fd:32:
         e0:77:43:de:03:5e:3d:e9:1c:c7:fa:a5:ca:ed:95:be:ac:19:
         d7:7d:d3:3f:ba:c5:04:47:ce:c6:30:96:e5:e6:5f:1b:cd:00:
         a2:40:35:8f:11:8c:40:c2:9d:de:06:e3:c8:a6:b2:83:04:18:
         2f:e7:3b:ce:45:23:b6:a5:d1:e3:a1:88:2d:6a:e5:b4:8e:74:
         d4:03:e0:b3:04:99:91:e2:00:45:6f:90:ed:61:c9:dc:8a:a9:
         64:ed:93:af:ec:a5:4e:a6:49:f1:a8:87:13:99:a7:f8:d5:cc:
         1c:91:64:76:ec:0f:50:f5:ff:1b:66:18:c1:bf:89:3d:0a:23:
         a8:1b:6d:72:1a:7f:89:ad:0e:65:63:7a:78:a7:b0:1d:7e:69:
         c1:56:ab:fb:69:d6:f8:6c:2e:7a:c1:b9:ce:19:79:58:f4:05:
         72:14:35:e4:45:81:bb:9f:c2:d3:ca:3f:66:31:87:5e:c6:e6:
         67:9d:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 03:03:20 2026 by rpki-client