Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa
File:                     e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa (raw, json)
Hash identifier:          Q5VeMD9gMFmGDwxE1w+2CXXMA8dCKo8h6hTH3G4Wvpw=
Subject key identifier:   54:E3:58:9E:34:E3:1D:BD:40:22:7B:18:0A:5E:54:D9:75:CD:99:7D
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F4328584EA793BE417317CFD7ED222900
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397735
IP address blocks:        2605:54c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:be:41:73:17:cf:d7:ed:22:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=463e46e1-e8b8-40a7-bbac-ecfb3d3247e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:91:23:f0:37:13:bc:ca:21:98:27:21:97:
                    b4:04:5a:24:07:66:cd:87:eb:04:69:70:2f:41:1a:
                    ca:5e:62:de:5b:2b:e9:74:e5:bb:ad:83:60:be:7a:
                    f2:7e:f7:81:dd:53:81:ad:de:89:d9:d4:4a:8d:d6:
                    1b:32:a7:0a:f8:62:a7:c4:09:a1:dc:23:ad:26:6b:
                    28:77:f6:b8:bb:88:45:74:b1:3b:f6:cb:7c:62:c2:
                    b0:31:1c:82:8e:7d:bd:6c:64:c4:3b:1e:7b:2f:1a:
                    8f:25:fe:20:74:d5:9c:97:34:15:f3:ec:1b:84:b2:
                    38:54:a7:1a:88:e1:87:d9:d2:7f:a2:89:c9:51:8b:
                    c4:d8:ce:85:27:c5:b9:a8:e9:e2:7c:1c:d1:ae:ad:
                    54:46:74:fb:9d:b3:f9:87:e6:16:b0:3e:cc:1a:e7:
                    ac:0c:77:a4:71:03:a6:e1:69:66:33:cf:eb:64:bb:
                    4c:51:cd:af:2d:77:28:8a:57:f4:ec:f0:51:97:42:
                    53:b0:da:39:e7:be:33:b4:4e:e0:8e:d8:50:4d:e3:
                    7c:bc:e4:1c:a0:53:a0:a4:27:5c:fd:b2:88:e7:23:
                    03:c9:71:6b:34:6b:c0:b4:b4:15:60:5f:0a:d7:47:
                    f5:0a:ea:c8:24:c5:27:3d:98:f4:38:b3:83:a4:6b:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E3:58:9E:34:E3:1D:BD:40:22:7B:18:0A:5E:54:D9:75:CD:99:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:54c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:fd:ce:21:69:04:9d:f0:da:b0:42:b0:85:c8:7e:85:c0:
         01:6f:0f:3b:d4:98:67:aa:ea:40:8c:03:af:6f:a7:09:c3:6b:
         9b:af:7e:e2:ce:95:cf:63:fd:c4:29:6b:8f:51:ef:9e:d5:ac:
         0c:2a:c8:85:43:fb:bd:12:b5:c8:99:40:7f:1e:60:9a:21:ed:
         0a:1d:bc:12:85:2d:19:6c:a4:5b:ff:a0:8d:5a:d4:8b:64:d5:
         9f:52:0d:e2:d8:ad:c9:27:d8:2b:d5:38:a1:50:d9:82:15:7d:
         93:e8:61:a6:c9:a5:a6:78:b9:8f:86:6a:f3:ea:13:16:02:72:
         b8:c7:68:1f:06:f3:ee:ba:39:0f:83:53:0a:1e:a2:12:2d:da:
         39:5b:4a:05:a1:a4:d9:87:15:95:86:8d:20:5c:a1:09:ea:c7:
         e5:7c:4f:a6:55:1e:4c:4a:a9:bf:2d:1e:c0:47:51:1c:bd:ab:
         9e:af:ac:e3:4f:a3:a1:f3:cb:9e:7c:75:e4:97:01:55:db:4c:
         2c:b6:d7:36:13:61:db:26:13:79:04:92:88:d5:cb:5d:61:c3:
         b9:c1:e7:a7:98:dc:f8:ff:7c:ff:6a:8f:90:26:65:1e:0e:ac:
         ff:5d:f8:a4:82:d6:0e:db:9c:c9:45:dd:96:34:ce:f2:3e:14:
         7b:be:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 04:33:01 2026 by rpki-client