Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/a97ca693-be0e-3463-98ab-492dd9383723.roa
File:                     a97ca693-be0e-3463-98ab-492dd9383723.roa (raw, json)
Hash identifier:          UIjOjFDZgpJw1/k0Kz4ZsQHRcJ2TmfZqZGz7XTyfvS8=
Subject key identifier:   37:0B:BA:8D:08:7E:E2:A5:26:CE:34:30:B6:A4:4F:D4:3F:9D:63:D9
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584EA787739665172D7BB57E9880
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/a97ca693-be0e-3463-98ab-492dd9383723.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25697
IP address blocks:        2605:7380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:73:96:65:17:2d:7b:b5:7e:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=868b730a-4966-4478-88f1-8391600bcf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:34:5b:98:e8:9e:e9:5e:40:c3:58:1b:77:
                    9c:96:3b:9a:84:62:dd:8c:01:83:ee:47:61:47:fb:
                    9d:8d:ef:95:83:16:0c:c1:59:aa:b8:75:96:3b:cc:
                    1d:d6:fc:3f:dd:2d:23:3b:54:d8:01:b6:26:fc:5f:
                    03:55:b3:1c:5b:a0:60:32:48:97:e0:61:c1:75:2f:
                    4c:37:ed:8e:d3:20:08:ac:d4:c5:b3:e6:2f:5b:a3:
                    02:15:42:9d:48:aa:a2:66:c0:2a:fe:57:00:f1:d7:
                    3d:67:20:ce:6d:9d:e6:b6:bf:78:0a:1c:45:16:41:
                    ea:4b:d9:d9:03:6d:3c:f7:9c:ab:a3:bf:34:2d:9c:
                    7f:7a:2b:ca:34:fe:f6:da:a1:5d:f3:a1:6b:0a:00:
                    41:63:0a:ef:f3:fb:3b:f0:d9:fc:a3:46:b9:e1:52:
                    e2:fd:3f:8f:54:b4:b8:eb:cc:d2:17:ba:f8:93:b7:
                    67:43:78:8c:99:fd:f1:d7:12:08:30:56:00:bb:21:
                    88:3c:b0:f2:03:6f:f9:4f:ba:97:07:be:19:dd:a1:
                    b1:0a:cc:9f:9e:36:e6:6a:84:ba:39:66:66:61:1d:
                    f4:56:48:1c:f8:7f:cf:bb:4f:b7:87:74:53:21:47:
                    68:24:a0:96:3b:b7:5c:90:65:e5:28:d0:cd:48:19:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0B:BA:8D:08:7E:E2:A5:26:CE:34:30:B6:A4:4F:D4:3F:9D:63:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/a97ca693-be0e-3463-98ab-492dd9383723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:15:c7:ae:47:92:62:dc:8c:78:05:d2:54:bd:56:ae:e5:
         aa:45:bd:e0:6a:3b:4c:aa:ee:c0:b9:08:8e:04:91:76:93:7c:
         e1:1b:4d:d1:3d:80:98:85:ba:2d:32:76:8d:d7:85:b6:3f:63:
         a7:73:67:fd:cf:27:56:de:02:ee:d5:72:07:de:df:be:78:92:
         ec:c1:7b:69:f1:75:1e:b6:a9:90:66:bb:4a:13:5e:a0:3e:cf:
         5e:79:23:2d:34:79:64:cb:be:3b:cb:60:e1:76:cc:6f:6b:a5:
         ed:68:87:17:14:66:ae:88:74:f5:6d:72:2d:07:23:23:23:fd:
         b0:8a:38:fe:da:e1:29:8c:9e:9b:88:1e:ff:b6:a0:f0:45:cd:
         06:2b:73:f3:67:91:eb:10:08:aa:7e:f2:62:b7:f7:a3:58:2c:
         4e:01:83:73:98:92:cd:87:ea:d1:f5:de:80:50:ef:1f:68:d2:
         5c:16:fe:f1:8d:1e:47:6f:99:e0:ce:07:e8:42:29:b1:21:02:
         c7:35:a6:b6:3c:e2:aa:4a:ef:e9:77:65:73:62:0f:95:82:ed:
         9c:24:db:f5:60:2f:a2:9f:6e:4f:51:3e:44:fb:c7:0a:5b:cd:
         ab:72:54:3b:44:f5:cd:07:c8:fe:fb:27:7c:84:e2:68:25:0e:
         ea:16:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:18:16 2026 by rpki-client