Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa
File:                     d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa (raw, json)
Hash identifier:          4Ro4+RKkEZCPt+r86EIMaTACi5tNEXKw7HjHcI+HDDg=
Subject key identifier:   52:A7:49:27:E9:EF:18:F9:51:6A:5F:8F:A1:70:6B:67:17:F9:39:C0
Certificate issuer:       /CN=675593d5-5ec7-4ba7-9134-6761cde6b601
Certificate serial:       010D0C9F4328584E3A2F734F9022BEB80BFFFA00
Authority key identifier: 5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     29
IP address blocks:        2604:b200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:73:4f:90:22:be:b8:0b:ff:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=675593d5-5ec7-4ba7-9134-6761cde6b601
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=93a9dcdf-4d5f-4fae-974c-06842001eac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:53:4f:78:6c:8b:f1:a8:6a:7e:3d:a4:bc:
                    70:9d:87:00:8c:66:00:99:62:42:41:f0:5a:8a:1f:
                    bc:0f:52:a9:3d:21:83:e2:21:3f:3d:38:fb:c8:9a:
                    44:6c:50:ca:c3:1e:af:a9:a5:a3:53:15:44:58:d8:
                    d7:72:18:b7:e5:e3:0c:3d:8c:ad:f1:ed:80:48:63:
                    30:5c:e4:c1:d3:78:ff:b3:88:d0:09:87:81:2a:e2:
                    a7:fd:aa:03:be:34:fc:6f:7c:59:18:97:2a:82:ba:
                    3c:de:9d:01:dc:9e:00:ff:3b:04:d5:cc:07:0f:59:
                    4f:9c:8c:9a:f7:99:4c:93:4b:05:c3:54:a9:71:af:
                    c0:b0:70:88:2d:31:f4:3b:42:3f:5f:46:9b:39:77:
                    82:6d:54:c7:eb:8f:36:ef:d3:9f:b3:a1:15:0b:52:
                    3c:99:ed:b7:f9:2a:08:ee:e4:67:9a:4b:37:7f:37:
                    c7:4e:e6:a6:df:fa:1c:ea:10:3c:66:9a:f8:1a:74:
                    ec:31:fa:44:22:df:27:62:5c:91:cd:02:f6:6a:a3:
                    7d:67:47:f5:5e:9b:33:3e:3a:4d:2d:fa:ad:5f:19:
                    41:58:8b:7c:b1:af:04:a8:0b:36:da:51:62:f7:b7:
                    bb:be:1c:82:26:fa:a0:72:74:44:13:f3:23:88:14:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:49:27:E9:EF:18:F9:51:6A:5F:8F:A1:70:6B:67:17:F9:39:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl

            X509v3 Authority Key Identifier:
                keyid:5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e8:3f:dd:67:ad:d7:5e:b3:e3:ad:4d:03:4b:0e:39:46:25:
         4f:a4:5d:d2:e2:af:92:ab:19:98:12:d4:07:18:b1:e9:01:f9:
         61:ce:77:33:7f:fa:55:72:e6:7d:54:96:71:57:44:45:5d:4e:
         2b:4b:32:16:85:c0:37:17:0f:86:7a:1b:9b:80:6a:5e:69:72:
         0e:e6:af:e0:cd:cb:2d:03:ab:08:ea:26:27:09:55:a8:55:6e:
         4d:d1:f7:be:ca:b0:f8:22:c9:ad:43:9c:0c:18:0b:64:2f:51:
         8d:59:7a:8b:50:28:62:8f:83:74:c1:c8:03:2d:d3:9e:af:ab:
         48:05:7f:59:4e:37:49:dc:83:8d:d5:de:f5:9c:46:6a:e3:0a:
         c5:3d:b9:e4:a5:89:ef:35:2f:51:08:46:0b:e0:97:8e:81:12:
         59:2f:8b:97:90:ff:b7:35:60:6d:41:d0:97:87:30:1e:11:b0:
         77:53:40:aa:c5:a3:4f:e6:93:15:e6:e2:2f:08:f4:75:4c:bf:
         a1:9d:b7:58:70:8a:d7:90:c0:6b:53:fb:cc:c7:a3:a6:b7:d6:
         fa:99:64:71:10:07:f4:41:c0:03:c6:f0:8e:de:07:49:29:4d:
         63:67:53:1b:d2:ec:33:d0:c1:2f:5f:93:05:ed:0d:9d:fd:c3:
         db:07:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:15:22 2026 by rpki-client