Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/c8f54e50-5f03-3f4d-9a33-8eb0e48b8841.roa
File:                     c8f54e50-5f03-3f4d-9a33-8eb0e48b8841.roa (raw, json)
Hash identifier:          HoVRgGMFTzrfJ6pcIBzRtuy2dBSm+We42fOm7tCVK8M=
Subject key identifier:   7E:A6:E2:D2:44:80:14:BC:E9:E3:6A:33:69:C9:3D:F7:C2:9D:62:BE
Certificate issuer:       /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial:       010D0C9F4328584EAF2340BB7D3131742CC11940
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/c8f54e50-5f03-3f4d-9a33-8eb0e48b8841.roa
Signing time:             Fri 31 Jul 2026 18:26:00 +0000
ROA not before:           Fri 31 Jul 2026 18:26:00 +0000
ROA not after:            Thu 29 Oct 2026 18:26:00 +0000
asID:                     36850
IP address blocks:        2610:28:3090::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:40:bb:7d:31:31:74:2c:c1:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
        Validity
            Not Before: Jul 31 18:26:00 2026 GMT
            Not After : Oct 29 18:26:00 2026 GMT
        Subject: CN=fd5d9227-e72b-43b2-ac56-07752b3b9dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:67:7c:30:53:4b:7e:76:4d:fa:2e:40:58:
                    4c:81:4f:a8:de:43:be:f0:dc:ba:54:8b:16:4b:97:
                    20:a9:96:18:a1:b8:72:22:35:f0:ee:6e:43:29:31:
                    26:8a:55:94:2f:8c:68:2b:ec:67:22:64:0b:df:a9:
                    4e:c9:1f:a3:ff:35:e0:a7:a2:92:18:2e:ce:f2:4b:
                    c5:b5:32:a4:51:4c:b7:4a:0b:e8:01:95:28:c7:a2:
                    1f:9a:b7:49:d1:5c:3f:fc:90:d8:52:2a:10:83:74:
                    f9:d6:02:82:8b:76:2c:31:10:51:ca:8b:ff:5f:b6:
                    9f:0f:1c:82:2e:d4:1b:1b:89:79:12:f6:18:1f:5c:
                    46:8d:4d:29:09:b7:cf:9c:7d:b0:42:85:14:bf:62:
                    f3:1f:e4:c5:07:a6:10:4a:45:98:1b:9a:60:ca:e7:
                    56:a6:82:08:2d:31:bf:5e:e8:36:f7:71:fa:f4:e1:
                    98:7b:92:3d:b5:f4:39:b8:f5:95:05:6d:12:b1:ed:
                    07:cf:03:0f:0e:df:51:e2:19:c8:34:bf:fa:8c:35:
                    a8:ee:c3:d6:2d:60:a5:a1:d0:1c:1f:a0:d9:6d:4e:
                    b9:5b:61:56:4e:90:a2:a0:20:14:8d:18:b4:be:d2:
                    5e:0e:5a:c4:11:e3:11:d8:04:5c:a8:a7:8e:4f:06:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:E2:D2:44:80:14:BC:E9:E3:6A:33:69:C9:3D:F7:C2:9D:62:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/c8f54e50-5f03-3f4d-9a33-8eb0e48b8841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:28:3090::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:81:cd:6d:f4:60:38:5e:19:de:93:a0:0e:8f:e1:d0:74:
         80:3e:90:af:c4:7e:cd:ab:78:e9:1d:c1:20:6e:9c:c8:1b:39:
         bd:2b:15:18:91:09:4b:7f:2c:1d:a9:a0:5d:09:46:49:20:ed:
         63:ea:f3:15:82:5b:f6:2b:17:06:6d:c9:86:bd:be:fb:6c:a0:
         0d:01:5d:a2:35:d8:fa:dd:2a:71:30:c2:37:21:ff:fa:d9:5b:
         df:ec:37:89:03:bb:49:94:11:aa:b7:ba:b3:dc:47:c2:0a:78:
         7c:ec:d5:45:cf:8f:f6:2a:27:73:72:b3:31:04:7f:b2:70:c1:
         54:3b:5d:4f:53:f3:50:79:44:97:47:3d:6a:5f:e6:23:40:ba:
         fb:d3:ea:a9:74:9a:1c:7b:6e:b9:32:73:e7:f6:76:b1:ce:a8:
         73:5b:bc:f9:02:e4:65:cd:b3:b1:bf:0e:76:f9:01:4e:ad:ea:
         1d:74:28:55:3d:cc:51:5f:cb:b7:5d:a6:f7:c5:63:01:e7:5f:
         f0:ec:fe:d6:59:fe:51:f5:1f:b7:0e:4f:03:f5:e3:52:48:2e:
         d3:c9:0e:8a:4e:19:70:c5:58:66:64:5f:0d:6a:52:10:65:7e:
         11:17:2b:65:97:e6:b0:6b:f0:15:fa:ba:67:5f:6e:0d:cb:04:
         87:d8:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:10:28 2026 by rpki-client