Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/f1d24be6-c34e-302c-8efb-57c85e6c6673.roa
File:                     f1d24be6-c34e-302c-8efb-57c85e6c6673.roa (raw, json)
Hash identifier:          Dc/+2+wO0qVFq2VBhiFavWWqFv4VN8yQsHfRhwNY3Cc=
Subject key identifier:   77:96:91:F5:A1:3E:8B:44:F1:1F:F3:23:5E:65:06:7F:ED:D1:32:AB
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584EE6574428715E3AD109FD2220
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/f1d24be6-c34e-302c-8efb-57c85e6c6673.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        2605:a7c0::/32 maxlen: 48
                          2620:df:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:44:28:71:5e:3a:d1:09:fd:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=4122a27c-020f-4107-90a8-ea8897521ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:cb:f4:73:19:38:21:ff:93:50:d8:33:e4:
                    6e:d6:f1:6c:19:aa:93:f6:42:e5:61:37:2f:92:ae:
                    6c:35:1c:66:1e:bc:88:e0:a6:e8:a2:7d:a9:e5:a6:
                    63:ea:82:60:78:0f:50:b5:31:7e:3a:6d:6f:c7:8b:
                    35:32:60:ad:aa:53:11:76:a9:17:64:fd:3b:ef:08:
                    d1:a0:11:00:e1:cd:c1:ec:46:67:f0:18:a2:61:c4:
                    d8:45:e5:9a:ee:b9:0d:c5:d2:b5:1e:84:0a:b8:d0:
                    75:63:8e:da:af:f3:d9:a5:c9:b5:34:e8:17:20:e7:
                    58:ad:48:10:0b:d4:05:7b:92:ef:26:c6:27:fc:87:
                    fb:d0:25:51:26:5e:b7:ab:79:bf:3e:cb:fe:90:d5:
                    72:ed:c8:fe:d7:4d:f8:4c:aa:5e:1b:96:37:92:e0:
                    42:91:e5:8d:f5:b9:bf:9e:f0:df:33:b7:15:a7:aa:
                    e5:fa:8d:95:9c:74:73:70:b8:b6:86:87:1f:be:04:
                    f4:43:dc:28:8c:6d:29:6e:92:49:d6:42:d4:ef:76:
                    68:86:2e:46:fb:5f:67:23:98:13:b4:1d:cf:96:b1:
                    1b:22:2a:9e:aa:fe:f8:00:8e:cc:d1:a0:d5:ac:79:
                    b0:8a:9c:88:eb:0e:96:fc:35:5d:de:f5:72:05:9c:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:96:91:F5:A1:3E:8B:44:F1:1F:F3:23:5E:65:06:7F:ED:D1:32:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/f1d24be6-c34e-302c-8efb-57c85e6c6673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/32
                  2620:df:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:63:9b:4c:90:06:62:43:f7:ed:b5:ba:77:40:b0:c6:a6:32:
         0a:07:ac:14:a1:72:b0:86:18:e5:e5:40:e8:6c:9c:96:f9:30:
         9c:0c:4a:2a:6f:5d:a4:d9:a2:84:f0:84:57:90:13:1a:86:74:
         42:2c:3b:d4:34:de:07:84:a8:5a:c2:d4:a0:c5:a8:37:40:4c:
         68:c9:8c:d7:0e:30:1c:07:0e:46:8a:50:75:5a:ad:36:89:a5:
         2a:2d:73:b6:a6:05:05:4a:a1:fc:68:83:a8:f9:81:f6:49:41:
         e4:cc:a1:bd:fa:be:f0:64:ba:bb:5f:2e:a8:d2:15:4b:93:15:
         2f:ed:a3:c7:95:4d:46:8d:3b:19:68:ba:90:1c:db:02:d3:8c:
         b0:16:ff:3d:31:1f:7a:b5:60:af:58:0a:37:79:94:f6:7a:f4:
         ef:5f:f3:15:55:77:68:38:31:33:dd:26:75:01:a2:d7:3d:35:
         ec:92:11:72:39:92:3c:41:7d:92:0d:43:9f:eb:2f:71:23:e2:
         be:62:1e:a9:45:99:e2:0f:9a:a8:60:b4:5b:e4:c5:8d:76:0c:
         41:5d:40:2e:91:af:79:cb:bf:7d:b4:8b:ee:db:02:c1:38:e2:
         a6:43:c4:49:6d:7f:21:27:61:c1:92:c8:e3:c3:e8:02:b8:37:
         9c:fc:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:25 2026 by rpki-client