Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa
File:                     88e05931-0c14-3925-9e24-ef2218634232.roa (raw, json)
Hash identifier:          HR/Jm8Uz5+MDdUABO9cQN7777zC4M4tACw9qUJEPl/M=
Subject key identifier:   AA:65:09:77:FC:4A:B2:EC:42:04:20:0D:E2:67:7A:56:05:45:51:B4
Certificate issuer:       /CN=21846a97-ea37-4a3f-89db-5c537c294e8e
Certificate serial:       010D0C9F4328584EA0155255EC93E0807B3B5400
Authority key identifier: F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     400678
IP address blocks:        2604:a6c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:52:55:ec:93:e0:80:7b:3b:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846a97-ea37-4a3f-89db-5c537c294e8e
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=c2c90961-5c2d-4dfd-ba2e-a9f709202c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:12:02:c9:3b:de:48:f2:bc:4e:75:f6:7f:
                    30:9b:94:d4:d6:0b:3e:d1:ee:a9:33:c0:fd:f2:c7:
                    54:d5:9b:00:1c:78:47:f7:a5:3a:aa:07:92:b2:38:
                    88:81:9e:05:33:de:db:df:0c:44:a8:c3:65:66:7a:
                    1d:15:df:14:19:4c:93:51:fb:bd:51:ef:74:eb:48:
                    2b:44:48:f9:a2:d5:68:1a:04:07:2a:d7:95:e1:bf:
                    34:aa:9d:0f:16:11:f3:ee:9e:38:64:15:a7:cb:51:
                    31:bb:c7:87:b3:84:3b:70:3b:fe:42:1a:8b:25:e2:
                    68:04:8a:ab:56:d5:87:ab:23:3c:2e:89:05:f5:ca:
                    39:d0:88:f3:d4:50:37:8a:d6:ac:0a:ad:8f:a0:9d:
                    0b:33:4f:ab:cf:cc:a3:7b:9d:78:c3:c9:fd:1b:05:
                    df:4a:f1:1a:27:00:5c:4f:bc:33:68:39:ba:cd:c5:
                    00:95:61:aa:ee:be:e0:34:76:cf:97:d3:2f:36:c9:
                    2f:51:fe:1f:5d:f9:26:70:9d:88:80:34:8d:42:a7:
                    43:b7:9f:f6:45:12:bd:12:0f:8e:54:ec:53:9c:fd:
                    65:cc:08:b0:8d:46:9b:5d:ca:d5:da:16:3f:95:67:
                    b0:e5:5d:3b:97:96:96:97:e4:86:fe:c7:64:c6:90:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:65:09:77:FC:4A:B2:EC:42:04:20:0D:E2:67:7A:56:05:45:51:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl

            X509v3 Authority Key Identifier:
                keyid:F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:be:53:da:76:e7:5d:0c:27:25:50:ea:7e:9c:ef:83:b5:
         bb:53:9c:38:c6:17:f3:44:b0:cc:60:1b:e1:da:57:0c:76:ea:
         2a:4d:b0:79:86:f8:3a:f8:58:cd:2d:87:85:e0:88:76:be:a5:
         da:fc:8d:04:40:54:f2:ab:55:41:05:7e:bb:3d:68:6a:a4:f4:
         4d:eb:a7:ed:7e:c6:51:a8:1c:02:99:e3:9a:e2:0a:26:54:19:
         0e:86:e6:23:64:84:34:c9:45:69:79:5d:ed:60:3b:c7:6d:ee:
         70:b2:53:a4:cf:d3:e0:43:d2:27:4b:04:ea:39:8a:80:da:38:
         47:6d:c8:01:99:22:b4:f5:b4:e6:82:d4:de:d3:81:a3:96:46:
         16:c6:1f:c8:ef:e6:96:21:1c:2f:13:59:9d:11:6f:8c:f0:40:
         60:06:4a:f8:72:ba:64:5e:a8:19:33:23:04:78:2c:cf:73:8c:
         48:b4:da:f2:d8:96:f8:42:b2:d6:5a:9a:a2:bc:f8:19:aa:d3:
         46:b0:32:83:f3:49:9c:f0:50:f6:e4:61:40:b0:0c:a1:6b:22:
         48:dc:19:e9:26:63:c8:0f:d9:8c:da:84:f4:9e:d2:b0:69:0b:
         f0:b8:72:90:cc:a1:60:75:33:a2:b6:f6:48:1f:ce:99:9c:6a:
         7f:b4:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:53 2026 by rpki-client