Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7/b810b9fc-0341-3e42-8339-9c3c4b2c3bf5.roa
File:                     b810b9fc-0341-3e42-8339-9c3c4b2c3bf5.roa (raw, json)
Hash identifier:          scnYrXjtFyP2dA/hnm9HNlfa3klsBpela1KBNwAvFMo=
Subject key identifier:   AD:61:DC:AD:63:C2:81:60:64:ED:51:FE:FC:21:37:23:C7:FE:FA:30
Certificate issuer:       /CN=2216574f-815d-4b2e-8fb3-9b4cff5e18b7
Certificate serial:       010D0C9F4328584EAFE6EB58563C8CA3BA717500
Authority key identifier: ED:97:6B:49:24:9C:71:80:BE:39:15:54:17:92:B6:5E:9F:34:FB:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7/b810b9fc-0341-3e42-8339-9c3c4b2c3bf5.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     32744
IP address blocks:        2620:b0:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7/2216574f-815d-4b2e-8fb3-9b4cff5e18b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7/2216574f-815d-4b2e-8fb3-9b4cff5e18b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:eb:58:56:3c:8c:a3:ba:71:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2216574f-815d-4b2e-8fb3-9b4cff5e18b7
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=b2e3ab38-9de9-4f0c-b6d5-f48f942b7842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:c8:e2:8c:fa:66:12:fa:48:32:78:d4:30:
                    6f:c0:5b:5b:16:89:0b:18:99:17:be:4b:73:00:43:
                    92:c2:04:d8:c8:00:d7:dd:00:d9:98:43:47:64:b2:
                    13:db:45:59:6d:d2:ee:ae:e7:0e:b8:52:23:97:fd:
                    ac:a4:b5:c8:af:ea:ab:bc:96:61:ee:e9:d0:18:16:
                    32:ba:d3:53:a2:05:6e:7f:12:b6:40:52:59:b8:b1:
                    38:6c:7a:66:be:5c:a8:ef:19:6f:23:14:80:52:bd:
                    78:92:13:7d:46:a5:08:d7:e1:03:b7:7b:e9:9c:f9:
                    41:4d:de:4b:c1:3d:d7:bf:1c:ec:c6:2a:6a:17:f5:
                    d8:b8:63:84:a0:d5:11:ce:e3:94:b8:e1:99:8d:3a:
                    b7:4c:83:a9:32:22:d0:f7:75:ae:bd:8d:d3:f9:b7:
                    06:90:96:86:23:37:66:1c:f1:22:92:a8:4a:1e:fd:
                    d2:61:d8:b7:e7:1d:58:49:ba:ba:aa:ef:c9:43:cb:
                    09:0e:2a:a2:79:3b:da:8a:f8:5f:63:97:b7:5b:86:
                    70:4f:c9:6d:6e:2a:15:f6:21:ae:c4:73:36:cc:d7:
                    7d:c5:65:96:06:74:d5:58:f3:90:eb:82:7c:00:87:
                    0a:7c:db:db:34:11:07:b8:ef:dd:d8:29:3b:d4:f7:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:61:DC:AD:63:C2:81:60:64:ED:51:FE:FC:21:37:23:C7:FE:FA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7/b810b9fc-0341-3e42-8339-9c3c4b2c3bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7/2216574f-815d-4b2e-8fb3-9b4cff5e18b7.crl

            X509v3 Authority Key Identifier:
                keyid:ED:97:6B:49:24:9C:71:80:BE:39:15:54:17:92:B6:5E:9F:34:FB:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2216574f-815d-4b2e-8fb3-9b4cff5e18b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b0:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:a3:c5:e3:8f:3f:e5:ef:5a:49:d9:25:83:43:a7:8a:a0:
         64:18:cc:7b:50:e9:35:5e:26:b4:d9:eb:3b:42:60:fa:8c:d3:
         95:5d:6e:d6:c4:40:82:77:fc:66:36:8c:86:4e:dd:dc:83:03:
         67:60:00:8b:64:1c:b7:03:16:56:06:b8:2d:06:98:98:7f:60:
         d5:b3:37:43:94:44:fa:e1:a8:3f:ac:3a:a2:64:42:34:70:c5:
         8a:42:b7:5a:87:55:70:05:d4:cf:25:18:2e:88:d1:cf:5c:65:
         86:fa:e0:d6:b0:40:00:b5:1d:d3:b9:8d:e7:73:2d:13:6e:03:
         ed:20:84:ac:3e:f0:cb:f8:d0:74:dc:9f:9e:8a:97:67:3c:2d:
         0f:85:29:7d:fe:d2:d4:28:90:8e:bc:bf:75:05:ef:ce:4c:9a:
         15:be:dd:f0:7e:d8:80:c6:1c:b1:e3:22:60:1f:98:93:53:e4:
         e8:d7:3f:6c:cc:93:87:f0:88:56:f8:1b:23:10:bf:12:16:80:
         bf:0d:5e:6b:1d:32:cd:8f:f2:f4:15:dd:27:a7:b8:db:1b:e5:
         5b:02:4b:d9:6f:47:fb:23:e0:82:44:da:93:b0:e2:87:35:b3:
         ea:d6:2e:83:c9:ef:0f:0b:b7:d4:28:e9:43:a0:49:ce:bf:6b:
         36:dd:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:19:09 2026 by rpki-client