Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c/117a46d9-7e5f-39e6-a467-b6e86bb2579c.roa
File:                     117a46d9-7e5f-39e6-a467-b6e86bb2579c.roa (raw, json)
Hash identifier:          d0qMjM22QLbM8SfzCUTAGVM2GOHcV8iAyxhKr9mjLvQ=
Subject key identifier:   7B:06:AB:9F:CF:DD:BB:A5:D6:86:17:78:FA:64:12:3B:ED:C8:EC:88
Certificate issuer:       /CN=b5c5b504-5576-446f-bd6c-34dfe488c01c
Certificate serial:       010D0C9F4328584EA7887283C36C54A6B625DB5C
Authority key identifier: 45:94:D2:E3:61:AC:19:6A:A1:18:37:B5:69:3F:72:A5:14:B1:B3:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c/117a46d9-7e5f-39e6-a467-b6e86bb2579c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27425
IP address blocks:        2606:89c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c/b5c5b504-5576-446f-bd6c-34dfe488c01c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c/b5c5b504-5576-446f-bd6c-34dfe488c01c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:72:83:c3:6c:54:a6:b6:25:db:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c5b504-5576-446f-bd6c-34dfe488c01c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1bb9c5e2-13c1-45cf-9451-c83c7eeab6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:48:37:a2:46:04:c0:9d:be:45:da:bf:9b:
                    cb:29:ca:ed:01:5e:e6:98:33:48:54:00:0a:8e:dd:
                    93:14:4d:be:dd:6c:45:c2:5f:32:2d:6b:a5:1a:00:
                    14:5c:6b:50:0e:41:2c:cb:51:59:b3:75:4a:3f:ef:
                    bf:16:62:9d:65:b3:c2:99:e3:85:60:f8:c1:1a:5f:
                    31:29:8c:8e:48:3b:98:ae:ec:00:a8:cc:59:0e:eb:
                    55:ff:bf:75:5e:2b:b2:a9:e4:46:d8:2c:09:84:f5:
                    e4:24:07:dd:a3:49:94:8f:f4:57:a3:20:1e:89:5c:
                    58:69:52:d0:5f:d0:e9:4e:0d:19:b7:6f:46:66:f1:
                    0b:49:d9:98:9a:95:88:22:ef:b5:1b:ba:85:d5:0b:
                    a9:5b:e6:72:a6:43:b6:21:50:9d:de:60:32:63:33:
                    dd:b0:b7:93:c4:7d:43:48:93:41:74:79:e3:d5:80:
                    98:3e:3d:a2:62:d4:6f:e4:25:e4:e7:19:64:50:80:
                    2b:f8:58:3b:8d:94:36:8b:df:e4:f3:15:18:f9:e6:
                    2a:37:a2:c7:27:3c:5a:7b:36:2d:75:ab:c1:c6:93:
                    f9:b2:4b:d5:65:75:82:8d:85:75:2a:10:3c:f6:4a:
                    34:18:dc:a9:d2:77:63:e5:d6:d5:61:83:8c:5e:e7:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:06:AB:9F:CF:DD:BB:A5:D6:86:17:78:FA:64:12:3B:ED:C8:EC:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c/117a46d9-7e5f-39e6-a467-b6e86bb2579c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c/b5c5b504-5576-446f-bd6c-34dfe488c01c.crl

            X509v3 Authority Key Identifier:
                keyid:45:94:D2:E3:61:AC:19:6A:A1:18:37:B5:69:3F:72:A5:14:B1:B3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b5c5b504-5576-446f-bd6c-34dfe488c01c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:89c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:1f:9b:c6:4b:1b:e2:1b:4c:b6:61:13:80:45:7d:4e:0d:03:
         e1:11:63:bf:dd:b3:40:8d:6a:8a:94:f0:c1:27:27:d9:db:95:
         b2:57:4d:21:fa:d7:44:bb:b7:69:43:e7:a1:2c:dd:41:37:22:
         00:ea:13:dd:b3:2f:d5:fc:c2:00:9e:22:0e:27:8d:9b:0e:f2:
         e7:6c:90:b7:5a:12:ec:d0:1a:f9:e8:aa:36:2a:a7:9c:4b:7c:
         8d:b0:e0:15:eb:ec:a6:96:d8:e3:35:ba:ec:4c:cf:a1:60:e2:
         f0:6f:c9:b9:86:a0:dc:5f:19:48:ae:84:9e:27:80:19:15:f3:
         49:1d:c7:8d:2b:32:a0:a8:db:0b:e1:6b:64:45:77:21:9b:af:
         e3:7c:1e:3b:a9:ce:df:c1:e5:1c:d0:4a:c6:46:93:98:5f:e0:
         7b:43:d1:2b:a6:ff:e4:bb:f1:33:ec:7a:85:dd:4b:29:76:93:
         39:4b:38:b9:db:4b:ca:2b:06:07:6d:01:f8:78:e6:1c:62:6a:
         56:1b:09:51:4c:c1:ea:d4:fa:a5:61:c9:49:6e:38:3b:15:0d:
         01:55:e1:90:33:a1:e2:67:14:bd:99:b4:77:85:37:7b:35:8f:
         cb:65:7a:08:5b:62:28:c9:6a:28:84:49:a6:5f:68:ed:59:34:
         d5:9f:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:05:34 2026 by rpki-client