Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa
File:                     7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa (raw, json)
Hash identifier:          bAFYc9KJ8Gh9PboYGVyp8eLt3EnXBtxWPeFujt5c+ac=
Subject key identifier:   29:74:95:31:B3:BE:AA:7A:00:CC:15:97:93:BD:31:F9:51:03:D8:41
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F4328584E50849D7AEC3CF578C1051D80
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     376
IP address blocks:        2001:510:20c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9d:7a:ec:3c:f5:78:c1:05:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=59ffef2e-d607-4baa-9bc9-4932b16fe126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:51:6e:16:65:96:37:56:59:36:df:02:a3:
                    fd:97:0e:b7:40:4a:86:03:28:14:2b:3d:06:fd:3b:
                    03:e8:56:9f:8f:0e:03:e6:03:c0:ad:ec:20:dd:03:
                    58:93:36:08:81:29:09:68:1b:13:11:ad:93:18:f1:
                    33:0f:90:48:af:94:17:39:d4:a7:2f:8b:46:f8:4f:
                    3d:95:41:14:d2:8d:cf:1a:ab:7a:4a:c0:b3:6c:75:
                    64:5e:96:f2:14:3a:22:50:d1:bc:0a:f3:24:4d:39:
                    bd:1a:12:67:36:af:66:1a:5e:60:66:95:27:32:25:
                    2c:a4:d1:c3:26:72:d4:8e:a7:b9:9b:68:4d:fa:06:
                    13:d8:c6:cb:c6:5e:4a:a1:61:cd:6e:6d:e6:0e:cf:
                    32:26:8a:ab:5d:a2:70:e8:c3:ad:96:b1:21:91:21:
                    14:4f:28:79:1d:01:01:b2:94:96:84:a9:98:0d:34:
                    f5:f6:18:2d:64:a8:6d:c0:ad:f8:34:8e:06:33:87:
                    3b:10:e0:74:c2:6a:2c:66:4b:b1:3c:f4:93:79:70:
                    e4:eb:c0:e6:61:b4:85:73:a4:54:06:6d:2e:a1:49:
                    f7:30:a2:d2:b8:7e:2d:8a:a5:c0:cd:a6:2a:5a:dc:
                    29:c4:f3:bd:15:df:fb:0b:ab:a1:62:4d:eb:ed:a7:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:74:95:31:B3:BE:AA:7A:00:CC:15:97:93:BD:31:F9:51:03:D8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:20c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a1:f6:df:eb:2c:a3:52:70:5b:54:23:66:19:fe:2b:76:42:
         d1:f7:7a:b0:6e:9f:07:da:7a:23:86:f2:d1:b6:17:42:5d:06:
         4e:a6:72:9c:b3:b7:31:bf:3b:6d:d3:e6:9d:5d:7b:27:da:d3:
         26:71:14:ef:ca:e8:a3:9e:7c:25:4e:f7:80:0e:50:02:0e:20:
         00:22:f1:6d:b8:56:dd:02:e8:d7:12:b3:7a:b5:e1:21:a0:e2:
         d4:0d:bd:ac:80:ec:42:8c:8d:3d:c4:2b:81:58:72:e7:8e:b9:
         88:ac:93:7d:6b:01:ca:63:43:4e:81:9a:e6:4c:c0:6f:7f:57:
         3b:2f:d4:3a:0c:b0:9d:be:ba:97:1b:6b:5e:d4:83:5f:ad:cb:
         c8:44:15:19:b1:f0:09:39:06:8a:bc:1d:ed:49:9f:07:a9:41:
         0a:cf:5a:ac:1b:25:56:33:f8:33:f7:8c:02:95:3d:2d:08:de:
         98:78:9d:6a:d8:cf:5c:92:25:9d:a6:6f:67:d8:65:a3:3f:bc:
         d0:25:73:3a:da:5b:9b:67:cc:b9:26:45:da:fc:dc:06:9d:f6:
         18:2e:eb:83:71:66:70:4f:d6:ee:ed:4c:0a:e7:19:a0:1c:2b:
         1a:47:8a:7f:ee:9d:3a:b2:40:c0:9a:7d:6a:e8:11:49:56:0d:
         4d:98:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:33:43 2026 by rpki-client