Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/c0e1de1c-0884-319d-9eb4-0c9284ce899f.roa
File:                     c0e1de1c-0884-319d-9eb4-0c9284ce899f.roa (raw, json)
Hash identifier:          svJz925u0UXNRqc4JVOm/EFFiDgYAOdPhtR8WVh0G88=
Subject key identifier:   AF:6C:28:E2:FC:54:10:9F:11:C7:F9:6A:2C:5A:5F:74:4D:8E:DE:E4
Certificate issuer:       /CN=ea312878-f1ba-42e7-a1ba-81816caf8ac5
Certificate serial:       010D0C9F4328584E90BA5E9A1CF6A21089F086A8
Authority key identifier: 03:07:10:68:04:D9:5C:64:24:49:7C:10:73:CC:A1:E3:FC:92:84:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/c0e1de1c-0884-319d-9eb4-0c9284ce899f.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     198949
IP address blocks:        2620:1b:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ea312878-f1ba-42e7-a1ba-81816caf8ac5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ea312878-f1ba-42e7-a1ba-81816caf8ac5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:5e:9a:1c:f6:a2:10:89:f0:86:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea312878-f1ba-42e7-a1ba-81816caf8ac5
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=c2d34e5e-6e1d-40dd-a1eb-3a7bd22c656b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:10:63:61:48:81:fe:bb:44:58:96:79:04:
                    e8:55:be:40:07:19:7d:ff:18:2e:d3:f9:cc:43:67:
                    03:28:27:80:65:65:d6:d8:8f:81:a3:43:99:04:54:
                    97:e0:08:15:63:6b:9a:d7:22:3c:02:f8:be:8e:ae:
                    a6:23:40:73:84:1c:07:fd:84:03:2e:eb:0e:b3:3f:
                    c9:33:b8:33:5d:2f:92:e6:b5:63:c5:9b:f4:ee:b1:
                    05:c2:8e:38:29:15:6d:32:a3:16:00:69:8d:27:20:
                    d5:58:0a:f8:a3:52:35:d8:9f:6f:e2:17:28:bd:7e:
                    c2:de:d0:64:4c:9e:0e:93:ee:94:e7:84:b0:1b:fe:
                    bd:ed:6d:0c:d7:a8:96:a5:8e:e2:9b:38:09:e2:67:
                    ce:b4:4f:d8:16:ff:80:ac:c3:e7:7c:ab:7c:0c:ca:
                    6b:85:63:7e:5d:6c:4e:a0:b7:7b:9a:a3:f5:97:a1:
                    40:11:f3:1f:bf:f3:b7:1d:b1:b5:67:c2:ac:4a:80:
                    69:13:48:1c:a9:b4:bd:1d:63:1f:78:25:4e:f8:33:
                    fd:9a:ea:c7:8c:63:1d:ee:42:66:00:c4:65:a1:99:
                    1d:89:74:1c:9a:cc:76:22:28:62:37:f1:a2:bf:b9:
                    2e:7e:57:b0:78:e2:42:f7:b5:83:67:f9:77:c7:5d:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6C:28:E2:FC:54:10:9F:11:C7:F9:6A:2C:5A:5F:74:4D:8E:DE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/c0e1de1c-0884-319d-9eb4-0c9284ce899f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ea312878-f1ba-42e7-a1ba-81816caf8ac5.crl

            X509v3 Authority Key Identifier:
                keyid:03:07:10:68:04:D9:5C:64:24:49:7C:10:73:CC:A1:E3:FC:92:84:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e0:73:d9:54:61:86:5f:35:d4:08:0c:34:cb:87:64:7c:f9:
         a7:b6:74:8a:2f:80:11:03:3d:a9:3c:f8:26:75:b6:37:ac:2f:
         b8:9c:96:1c:e5:26:31:2a:b5:ec:42:6b:1b:d1:66:3e:42:41:
         08:71:f3:0f:23:a4:31:c6:73:98:ba:9e:6c:12:c3:29:e9:c0:
         bd:1e:52:24:73:89:b7:01:05:98:72:27:56:77:3c:9f:4f:4f:
         d5:ce:a0:27:40:0b:97:86:8b:ce:27:55:ba:9f:6b:43:99:3f:
         7f:79:71:24:fd:38:30:8d:ac:7a:c0:4f:fc:21:cb:57:10:ce:
         d2:be:97:cd:29:3c:af:f3:a5:b7:3b:18:ed:06:13:67:d6:8a:
         2b:89:cb:e7:a9:14:d4:33:0e:48:3e:60:eb:a8:b2:a6:07:23:
         99:ee:12:6e:47:34:11:4b:fa:4d:6a:4b:54:7d:ff:a1:c6:ea:
         1b:67:7f:79:9c:9b:a2:ab:5e:78:78:a5:f2:05:c8:7f:69:64:
         a1:15:50:ae:c4:fd:ab:ae:50:f0:8f:f4:aa:db:ab:6b:9e:9c:
         67:7f:6d:28:21:e6:70:67:65:6f:a7:cc:b8:b8:73:3d:19:52:
         e5:30:51:c1:c1:3e:53:f4:af:cf:6a:ae:bc:24:b6:30:dd:c3:
         ee:01:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:00:13 2026 by rpki-client