Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/e0b13cf2-4c85-3047-9b4d-c199dc2055d7.roa
File:                     e0b13cf2-4c85-3047-9b4d-c199dc2055d7.roa (raw, json)
Hash identifier:          7/DS/MCPSjxtZ/zXJf1/XkdXQQYeXmcDNDYIVUbR37M=
Subject key identifier:   D3:71:5D:F4:07:1D:AC:3D:6E:37:19:17:E9:95:F3:2A:18:66:9B:3D
Certificate issuer:       /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
Certificate serial:       010D0C9F4328584E640F54F5D39AC4DDF66E5000
Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/e0b13cf2-4c85-3047-9b4d-c199dc2055d7.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        2606:b740:1::/48 maxlen: 48
                          2606:b740:49::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:54:f5:d3:9a:c4:dd:f6:6e:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=32d081f1-2036-40e9-b1f7-56efff37b399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:42:c7:73:c2:7a:12:5e:a3:0c:1e:99:ee:
                    85:f4:4c:08:11:78:71:45:8b:e1:b4:92:0e:0d:55:
                    ad:01:e1:ec:37:9f:f6:96:87:95:c1:25:02:f2:6c:
                    9c:d7:53:d1:02:60:7d:96:ad:c9:48:92:12:1c:1f:
                    b4:65:b3:8a:47:5a:ca:0c:74:d8:6e:c6:f7:4f:d8:
                    b7:a3:f7:83:6d:a4:c8:c1:af:97:1b:7b:c4:e4:6a:
                    b5:8d:64:db:27:c8:a3:1f:cf:d4:3a:bb:7c:61:d0:
                    93:f9:d0:91:dd:a2:a5:20:b1:3d:50:25:66:25:f6:
                    e1:91:3b:9e:29:ea:7e:95:01:e3:95:22:a8:af:ec:
                    f3:17:a7:4f:ed:cd:a6:b6:0f:6f:7c:b6:af:3e:89:
                    7a:d7:d4:d1:c9:fe:69:82:6b:e3:7a:a0:15:c4:e8:
                    b6:60:d2:29:e7:ae:6e:4d:06:43:30:06:8a:56:3a:
                    84:c0:df:46:92:9a:1f:2c:8c:63:f3:aa:44:16:0e:
                    da:0a:5d:75:62:17:3e:99:4c:b1:e0:df:2e:44:b8:
                    10:f9:1b:33:7f:45:0a:81:b2:4d:30:e6:5b:ca:e7:
                    b5:d9:b8:a5:58:59:07:d3:68:b6:66:0c:f8:7a:ef:
                    9a:eb:7c:7a:2c:f6:ab:40:ff:5b:83:52:b9:5d:fd:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:71:5D:F4:07:1D:AC:3D:6E:37:19:17:E9:95:F3:2A:18:66:9B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/e0b13cf2-4c85-3047-9b4d-c199dc2055d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl

            X509v3 Authority Key Identifier:
                keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b740:1::/48
                  2606:b740:49::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f7:06:4c:b2:2f:1d:79:38:57:b7:fe:21:4d:e8:2c:15:8a:
         9d:a4:2c:fd:c1:24:4f:b1:60:54:c6:8b:00:96:b8:d0:f7:fc:
         b9:ac:d9:e6:83:c9:ca:c4:e9:9b:ca:09:70:a8:10:55:d5:63:
         f8:1a:27:ca:7a:1f:bb:23:a6:bf:7b:15:64:aa:f1:66:24:3e:
         20:bb:65:55:b7:41:99:03:4c:94:4c:c4:b0:77:6f:56:0f:af:
         52:c4:c9:60:4c:b5:74:27:c1:6e:0e:ee:35:06:aa:73:e9:24:
         9b:9f:8a:b4:88:9d:e8:e7:a9:e0:82:67:f7:6b:ea:5e:a6:e6:
         63:4a:ce:b8:f1:59:73:8d:25:f3:06:38:8b:9b:6b:65:70:aa:
         9a:0e:5d:e1:a4:e5:c5:33:d7:15:b2:f0:69:d8:1f:a3:eb:b1:
         98:a1:d9:34:9a:80:3e:10:fd:f9:4d:1c:0c:e8:af:d9:59:77:
         a7:04:e6:6d:28:4d:fe:8e:6f:6d:db:a1:40:15:ce:de:6d:4b:
         f5:7d:80:41:36:0a:5b:82:90:2e:8e:73:8a:3e:f5:b9:89:5e:
         7d:71:f2:90:3a:46:cc:ce:70:a3:1e:5e:03:59:31:81:64:e7:
         09:de:a0:2b:5a:61:d6:22:4e:1a:c2:7f:5d:3b:d0:83:f7:34:
         a3:fe:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:19:22 2026 by rpki-client