Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/ea2005d6-5875-3f6e-908a-d29a10d0841d.roa
File:                     ea2005d6-5875-3f6e-908a-d29a10d0841d.roa (raw, json)
Hash identifier:          n0rrw/lXJU1Ay/7MNAtGmrCqbjCFpA0CABTtRBxg62A=
Subject key identifier:   A1:CC:AB:B9:D3:F2:50:79:A0:9A:00:B0:87:1D:09:7E:CB:DF:18:53
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F4328584E50849D58B9453559A95CF050
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/ea2005d6-5875-3f6e-908a-d29a10d0841d.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     36786
IP address blocks:        2001:510:130::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9d:58:b9:45:35:59:a9:5c:f0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=9c8249aa-aa55-4cf3-94c7-2452ac726669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:85:41:f5:93:3d:3a:bc:3b:7d:c9:26:75:
                    7e:b0:2c:2e:17:13:27:58:ec:f1:4d:dd:64:6a:0a:
                    4a:9c:b9:38:8f:57:fd:b2:8d:78:1b:f6:c9:6e:95:
                    fd:cd:52:96:11:3f:da:c4:f2:8d:3a:0b:77:59:1e:
                    22:b7:4a:88:b5:0b:b9:6a:15:58:6a:48:66:3c:1b:
                    93:87:5f:cf:2d:17:f2:8a:4b:81:e8:c8:20:21:e7:
                    dc:5a:18:0f:94:26:e2:25:be:08:1d:bb:9a:4b:43:
                    7f:c0:34:5f:62:a8:45:da:20:b9:2e:24:27:9f:8c:
                    93:dd:82:f0:e7:16:b9:dd:a9:60:a7:8b:7e:7f:53:
                    32:87:d5:11:83:07:29:84:23:62:e6:19:7a:fb:cf:
                    fd:a2:5f:1b:73:d9:b3:ca:2f:4a:94:0b:5f:0a:f8:
                    18:9c:3b:62:7f:96:94:36:92:6e:e6:2f:bc:1a:35:
                    7c:fd:db:6d:1c:9b:ad:80:db:f3:c0:64:e0:19:06:
                    01:2e:99:f3:6b:2e:10:85:7b:72:7e:66:b4:27:78:
                    25:1e:39:0c:6c:89:95:77:a9:97:27:53:27:bc:07:
                    92:a3:c5:79:55:e9:e5:1a:ab:3e:aa:27:b4:ac:83:
                    be:26:f3:1b:aa:d2:1e:5e:f3:fe:9c:d9:0c:fe:bf:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:AB:B9:D3:F2:50:79:A0:9A:00:B0:87:1D:09:7E:CB:DF:18:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/ea2005d6-5875-3f6e-908a-d29a10d0841d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:130::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:83:c8:ba:9a:0f:04:3a:e0:1c:42:20:d3:fe:d6:77:e5:
         95:33:01:b1:3b:06:7e:89:fb:87:26:ac:42:50:16:86:48:31:
         14:91:4b:05:5e:6f:c9:db:be:c2:5b:30:7a:24:0c:50:fe:54:
         65:a7:e4:01:10:ec:7d:e3:49:2a:2f:1b:21:95:88:13:69:1f:
         06:2b:a2:1b:6d:50:98:99:d7:48:96:0a:04:c1:15:af:a2:0c:
         e1:2d:cd:69:c0:bb:ee:98:88:8c:a8:63:5d:00:4f:38:45:0b:
         94:17:3f:02:d6:5d:a3:07:fb:6f:32:81:4d:93:77:80:67:06:
         91:14:ad:a0:b6:04:76:48:95:88:a4:71:df:30:7c:f0:67:c1:
         0f:a7:65:87:ff:bc:d8:d8:a7:e9:6c:90:24:9a:b2:05:ae:dd:
         07:98:06:76:3a:91:77:da:93:ee:d2:e7:e5:a4:2d:45:46:b1:
         76:25:dc:8e:80:35:d7:0a:b5:c2:60:88:6b:df:12:5b:74:7f:
         6f:44:c1:58:84:09:0d:37:18:9a:b1:a7:de:b4:ec:5b:e8:ff:
         81:00:26:57:9c:24:10:5d:39:f2:1f:06:a9:64:50:1f:7a:bf:
         25:8b:c4:3d:63:08:e8:05:ad:c5:5e:01:f2:5c:86:8a:66:11:
         6a:55:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:06:10 2026 by rpki-client