Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4d5395ef-3076-3f38-8783-38becd51a220.roa
File:                     4d5395ef-3076-3f38-8783-38becd51a220.roa (raw, json)
Hash identifier:          aZf/fb6wOqFAHCJFqz2GxF27hIYwBmdgW6OqjiLwZdA=
Subject key identifier:   C3:1B:89:D8:FA:91:0F:55:8F:0D:0C:65:A6:74:C8:06:DD:D4:C0:A0
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E5FDF5C3557360C3D542DF080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4d5395ef-3076-3f38-8783-38becd51a220.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     6461
IP address blocks:        2604:e500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5c:35:57:36:0c:3d:54:2d:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=ac05260c-a996-4e24-a0dd-d2491cb66996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:03:3d:cd:6c:a9:4d:cc:92:15:9b:9a:37:
                    82:88:01:1b:19:70:be:b8:78:ed:4d:41:df:b7:c0:
                    57:07:71:89:90:9b:7c:79:b3:d7:c7:dc:39:87:b4:
                    2c:59:29:75:59:f4:c9:29:33:1d:fe:2a:c5:c2:51:
                    5e:6a:f4:78:63:66:96:32:05:2b:1e:11:bf:74:4b:
                    1d:56:c4:54:b0:b7:7e:6f:55:38:13:fa:37:d6:c1:
                    a9:65:e1:da:e5:6c:7f:f8:21:ef:2d:cb:82:f9:a1:
                    ac:c0:12:2e:f8:3a:35:c9:f2:f8:7b:26:c3:ee:d9:
                    2e:d9:7c:ec:8c:a1:1c:60:74:99:02:4f:77:88:de:
                    5d:3b:05:34:2d:6d:fd:5d:97:9c:43:e2:98:27:74:
                    bc:60:49:e5:f9:20:74:1f:aa:df:0c:a0:cf:f6:6d:
                    23:aa:03:68:8f:5e:6f:e0:04:3a:b0:99:05:29:d2:
                    07:36:6c:24:86:6e:2e:24:5f:c7:07:4e:33:6d:11:
                    a0:6e:d1:ea:50:c3:d7:8a:1e:a7:69:a6:2d:f7:3d:
                    33:97:69:8b:32:96:0e:35:f7:c9:17:a7:bd:fa:ab:
                    ee:f1:70:b0:93:11:2d:60:4f:2e:56:ae:67:1d:f4:
                    e2:a8:54:07:7a:8e:19:63:a8:f8:38:c0:bc:dd:88:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:89:D8:FA:91:0F:55:8F:0D:0C:65:A6:74:C8:06:DD:D4:C0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4d5395ef-3076-3f38-8783-38becd51a220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:f0:28:13:88:a9:c9:43:07:ec:1e:e2:59:ff:91:15:8d:05:
         e2:df:9e:be:35:f5:35:b2:fd:29:dc:ab:ca:26:30:d9:11:d7:
         75:1e:cf:3c:8e:20:a6:8c:ad:e9:2e:58:e2:b0:f5:83:8d:ff:
         f3:2d:29:f7:f6:8c:ed:aa:ab:62:15:e3:11:c6:26:59:f4:4e:
         c9:cc:ca:60:14:be:60:11:59:00:b0:7f:20:0d:b7:22:2a:53:
         ff:15:15:17:e5:47:f1:4d:0b:4f:60:17:88:1c:a3:64:20:13:
         02:10:d8:8e:aa:57:75:65:00:f3:bf:98:52:50:e8:4a:d6:d3:
         30:3d:26:3e:e9:76:be:82:37:ae:07:2f:b1:7d:65:0d:11:d4:
         99:f3:7e:3b:d0:34:fc:a7:97:38:60:91:e3:c1:88:a6:95:3f:
         ac:9c:8a:ba:a8:41:d8:c5:5e:0a:2d:83:de:f6:2f:0b:01:9d:
         5a:20:14:e3:39:10:03:e6:c0:8e:32:24:70:5c:e1:a5:8e:ca:
         5a:45:c8:47:26:5f:2b:08:9f:5c:a5:2b:d5:f5:bc:11:32:45:
         93:b3:a6:c6:c1:90:b6:67:ad:41:b7:2e:34:d1:7c:eb:a9:6c:
         85:25:bc:9a:db:71:0e:16:c4:db:c1:f3:77:4c:94:60:a3:d8:
         3d:d0:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:52:36 2026 by rpki-client