Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa
File:                     8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa (raw, json)
Hash identifier:          tlF8rkawvv+k7XMLRUxXVJCYeHA1B/zBGUffs1pkrY4=
Subject key identifier:   BD:B1:BB:10:90:DF:44:AE:50:A1:56:19:7D:10:D7:77:6C:AA:3E:01
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584EA786E9C223AE7D596A57BD80
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30513
IP address blocks:        2001:4968::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e9:c2:23:ae:7d:59:6a:57:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=93821cea-dcf4-4079-83ed-868a2d7b9b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:18:d0:96:1a:ee:08:9e:07:3e:1d:ef:66:
                    72:c2:a8:3a:d3:d1:05:eb:9c:09:87:34:a0:78:bc:
                    a4:06:46:86:92:2e:59:f0:78:4f:0f:d3:6f:8d:86:
                    cd:61:59:43:fe:f7:4a:18:b8:66:bb:3e:01:ab:a2:
                    9c:49:4b:9d:eb:32:56:ef:3f:f7:78:e7:2e:9f:08:
                    24:98:b6:5c:e0:68:65:bf:2b:a1:22:fb:b6:5e:ff:
                    7b:63:ce:8c:d3:03:f8:dc:c0:ce:4b:4c:91:7f:ee:
                    87:0c:fa:1a:71:a1:7a:ed:ca:41:b4:e9:04:64:e9:
                    bd:10:4a:4d:5f:e7:db:a6:c2:6e:6b:00:06:1c:e8:
                    9f:26:b7:98:99:14:33:c4:8f:34:7a:d2:00:4e:35:
                    68:11:ac:96:a5:78:d9:fc:a6:6b:89:ce:bb:d0:65:
                    aa:90:62:3e:b5:42:f5:dd:e3:37:85:a7:a7:ff:e2:
                    41:f5:70:93:fd:7b:7d:57:69:1a:b1:1b:0c:16:96:
                    96:b9:22:ef:1c:08:df:83:be:88:8a:b8:ab:c1:0d:
                    6a:e7:7a:8d:d3:fd:4b:f4:11:56:ed:bb:1e:68:a5:
                    23:d4:ed:cb:7d:b4:5e:89:b1:0c:7e:4c:d0:08:26:
                    ae:a0:b7:d9:39:be:34:79:f1:2c:d8:80:0d:1d:2b:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B1:BB:10:90:DF:44:AE:50:A1:56:19:7D:10:D7:77:6C:AA:3E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4968::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4b:aa:60:f4:4c:f6:66:e0:97:09:b2:7d:1b:e1:3d:9e:e9:
         c2:36:55:37:47:b6:50:53:73:f1:ee:b3:82:20:84:4d:63:37:
         9d:81:1b:97:8b:70:7b:0b:40:f8:55:4c:52:bc:f4:af:c7:91:
         8f:7a:c4:50:31:06:7b:0f:e4:c4:70:b0:f3:5d:f8:0f:e2:c5:
         a1:92:7b:0f:d4:3c:b2:fb:f4:51:e3:ac:c5:ab:07:6a:41:aa:
         33:5b:01:2b:1d:7e:34:b1:75:14:10:3b:a6:48:d2:d5:26:2c:
         ac:34:90:10:b5:e1:43:04:80:d7:06:00:84:ba:33:91:b3:2b:
         0b:59:8d:d0:1d:ce:63:81:9c:b6:f1:99:3f:48:8d:07:9c:2d:
         1b:c6:fa:8f:bc:ad:90:c4:67:d5:33:67:58:52:8b:0c:a7:49:
         58:23:38:23:b3:cc:a5:f0:36:df:a9:de:e9:38:35:b3:f2:e6:
         8d:19:6f:56:46:10:f7:94:6a:c0:db:1d:da:9c:99:4e:74:28:
         e1:48:cd:1f:cf:ed:d2:b0:e2:ff:11:d5:19:0c:60:27:b8:d0:
         26:e4:ce:82:46:48:d7:f8:30:fb:43:07:8a:6e:02:b9:16:b3:
         30:7a:68:d7:c0:43:39:0f:3e:3d:96:73:4c:d4:18:65:5a:98:
         e6:26:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:05 2026 by rpki-client