Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2085f292-1cee-3b22-9804-02887f281eb4.roa
File:                     2085f292-1cee-3b22-9804-02887f281eb4.roa (raw, json)
Hash identifier:          YBK9rm4XR2mAj5EsGHIxUi8I7VUgbvTxBgOG4BKZMg4=
Subject key identifier:   E1:BA:7B:C8:4C:2F:B7:3C:AE:4C:ED:DF:60:34:15:2D:45:75:2E:63
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584E878EE3C4655801C7C8B6E6C0
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2085f292-1cee-3b22-9804-02887f281eb4.roa
Signing time:             Fri 17 Jul 2026 14:10:33 +0000
ROA not before:           Fri 17 Jul 2026 14:10:33 +0000
ROA not after:            Thu 15 Oct 2026 14:10:33 +0000
asID:                     7352
IP address blocks:        2604:cd00:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:8e:e3:c4:65:58:01:c7:c8:b6:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Jul 17 14:10:33 2026 GMT
            Not After : Oct 15 14:10:33 2026 GMT
        Subject: CN=686a3349-598a-4573-8fe6-b4e913590f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:59:d2:24:ef:89:a9:07:53:fa:85:d2:64:fe:
                    d6:0c:5e:7c:92:e4:04:30:d0:b6:1d:88:07:40:16:
                    6d:16:db:dd:21:aa:65:f4:8f:7a:77:fc:37:a2:15:
                    28:71:ee:47:4c:d8:dd:80:b4:ef:9c:a7:a5:2f:92:
                    da:9d:00:67:2c:12:88:19:77:8c:ef:46:59:e3:ac:
                    cc:b1:77:e6:71:ea:b3:92:e6:9a:13:ce:20:8a:1a:
                    a4:07:be:17:31:77:2c:a2:eb:d4:aa:45:53:6f:84:
                    b5:92:72:c3:e8:ff:c0:ad:bc:23:de:8a:13:9a:b4:
                    65:8f:a4:19:a4:3f:c5:80:d9:3b:11:26:ae:62:a0:
                    c8:2f:3b:7c:4a:d8:c4:97:56:50:47:d7:46:8e:62:
                    59:a9:fd:4a:a4:d7:90:43:09:3c:cb:33:3d:97:06:
                    56:3d:90:dc:a8:dd:25:a4:11:68:ee:40:d4:9c:78:
                    a1:fa:0f:5d:be:0b:b3:da:23:26:a9:d0:52:3e:a2:
                    06:c9:99:8e:68:92:47:38:36:30:51:22:5d:5e:2d:
                    3e:97:b4:f1:6a:c2:f1:3d:c0:f0:89:8a:6b:78:d9:
                    7d:7d:16:65:55:bf:ea:74:f6:e0:60:23:6b:45:9a:
                    82:21:1c:00:89:5e:37:b0:86:08:65:3f:e2:cd:c6:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BA:7B:C8:4C:2F:B7:3C:AE:4C:ED:DF:60:34:15:2D:45:75:2E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2085f292-1cee-3b22-9804-02887f281eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cd00:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:a3:d1:ea:cd:bd:c0:82:35:11:b0:df:9d:2c:fa:3a:59:
         4b:75:17:24:89:88:5d:52:0e:b1:a4:8c:4e:dc:c6:54:74:0c:
         2c:4d:45:d3:32:59:73:70:b5:54:8f:67:32:15:aa:44:79:78:
         33:3a:82:ea:74:c6:0a:7f:83:e6:38:2f:eb:0f:f2:3a:38:a2:
         9a:f9:c6:16:51:3e:7e:e8:30:49:9d:2b:e0:df:8b:0e:4a:0c:
         f9:20:a6:ab:8e:bf:1c:9d:d5:33:43:99:7f:56:21:49:80:e2:
         68:1e:5c:56:e3:2b:73:9b:5f:e3:29:1a:d7:77:0a:97:0b:4d:
         a0:cd:24:60:72:09:f2:cb:97:b5:ac:44:4f:ec:72:3a:97:23:
         77:74:e4:23:7c:6b:f1:ae:78:39:d3:25:63:9e:3d:1c:7c:41:
         46:e3:cd:fc:d7:8d:f7:5e:5b:23:b3:da:09:ea:8c:10:ea:16:
         db:df:4a:de:92:08:cc:42:ed:7e:93:0b:cd:a9:25:dc:fb:e7:
         4d:da:7f:50:5a:b8:7e:8e:56:3c:e2:49:b3:44:e2:1e:69:5a:
         7f:55:47:10:8e:15:df:8f:ab:01:1f:3c:d8:7f:33:fc:9b:82:
         3f:b5:39:0b:32:65:27:33:44:8c:08:b0:4f:36:e3:bc:9a:84:
         83:58:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:34 2026 by rpki-client