Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa
File:                     4c9b872a-c498-3caf-a727-0a8324532537.roa (raw, json)
Hash identifier:          YjWz0mIUX3SYkX077kusu/CvvaksKO4Dl4DHBeJyUUY=
Subject key identifier:   76:F7:50:9D:0B:64:53:A7:F1:C3:08:2D:3D:6E:E4:AC:7D:96:7E:18
Certificate issuer:       /CN=13d1e2d5-5089-4514-80fb-652631b3cfab
Certificate serial:       010D0C9F4328584EBC77096833C349023BF5E540
Authority key identifier: 03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     62917
IP address blocks:        2604:82c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:09:68:33:c3:49:02:3b:f5:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d1e2d5-5089-4514-80fb-652631b3cfab
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=7ec74ec4-b0e8-4560-864a-da5de968dcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:4e:59:58:f8:7d:72:ae:e4:6e:aa:97:47:
                    c2:e8:32:69:6e:d5:9e:20:ee:d0:01:80:1f:90:ca:
                    14:9d:59:60:f1:df:e8:c9:6d:e8:20:68:57:21:cf:
                    16:7d:75:ac:b2:7f:46:72:1d:12:23:af:18:4c:0b:
                    9d:15:95:83:5d:e4:dd:1b:0b:4e:f5:72:dc:dc:54:
                    6a:21:93:ef:7a:a5:7f:f1:1b:93:b5:4c:29:af:21:
                    47:fd:66:11:6b:6b:c8:b4:64:46:67:b4:bc:d6:f2:
                    b2:cd:d3:4f:82:71:18:84:e9:7d:1b:c3:b2:88:da:
                    80:d6:ff:36:1e:14:51:bf:19:73:1f:c0:e5:aa:0c:
                    79:c4:53:e1:30:8a:cf:ab:4d:5d:4b:0f:0a:2f:d4:
                    63:a1:bb:48:d2:b3:02:5c:3e:e2:e9:3a:79:b7:57:
                    ba:17:63:3a:4a:96:25:eb:27:b4:b9:96:f4:5f:43:
                    77:c2:ae:47:d3:9b:2b:a3:21:42:45:71:1d:fe:86:
                    a8:6d:74:af:8b:a5:75:92:91:3f:79:76:3e:97:e6:
                    c1:1d:ac:ca:50:56:c5:c2:1b:64:da:13:17:ae:36:
                    96:12:04:5e:df:83:d5:bb:4b:18:31:d4:3c:e5:36:
                    13:51:1d:fc:e6:02:df:6b:fb:9c:b0:e6:b7:ab:d5:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F7:50:9D:0B:64:53:A7:F1:C3:08:2D:3D:6E:E4:AC:7D:96:7E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/4c9b872a-c498-3caf-a727-0a8324532537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl

            X509v3 Authority Key Identifier:
                keyid:03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:82c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:24:d8:55:a6:60:d4:0c:ef:84:7f:b6:dc:62:e1:93:21:
         9b:56:f7:ce:c5:4d:dd:d9:13:f0:75:a7:c6:3e:c3:42:81:8c:
         7b:fd:74:fa:9c:43:62:47:a4:f6:1e:77:29:ac:56:9b:c6:cf:
         75:fa:8d:c7:ce:72:96:78:51:cc:59:35:f0:b1:e7:9d:e7:82:
         d4:a5:89:1d:8c:40:e2:09:a1:5f:bf:eb:5f:ae:36:69:77:a7:
         a2:37:97:e1:4c:c5:48:60:4e:34:98:26:ea:77:d3:af:fc:4d:
         74:02:c7:13:39:2f:45:35:6f:b1:d5:12:48:9c:15:95:dc:f1:
         6e:37:56:ce:59:1b:98:2a:8f:f6:64:7e:b3:e5:03:b3:f1:eb:
         5e:8a:c0:32:b5:9e:b8:15:d3:ad:50:d8:2d:a3:82:16:48:85:
         66:c9:90:92:01:f9:e3:ae:86:53:38:85:8c:fd:0d:5b:30:7d:
         c7:0d:fd:29:a4:b4:01:33:96:98:fd:d1:01:a6:76:6d:a6:a7:
         18:4e:94:de:39:a7:b6:35:9a:d4:85:ea:b3:dc:fd:93:81:62:
         48:f0:4d:95:8f:85:82:8a:2b:06:19:cd:de:6e:4d:46:fb:90:
         b3:b0:4e:35:df:72:19:01:52:74:f0:06:a4:ee:f2:e4:b9:c9:
         e5:30:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:13:11 2026 by rpki-client