Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa
File:                     dba30138-3d5e-38b5-91a7-e87672ea0f44.roa (raw, json)
Hash identifier:          ecVnnspOBVB+PM/m1cS9rF3YXJNGcepkEZhLu20rxCU=
Subject key identifier:   8C:AE:E9:77:9C:F8:46:24:51:D6:22:E4:E9:00:A8:6E:72:76:F4:0E
Certificate issuer:       /CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
Certificate serial:       010D0C9F4328584EE7BCAEC285073391ED8D5800
Authority key identifier: 9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     33194
IP address blocks:        2620:10:a000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ae:c2:85:07:33:91:ed:8d:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=bf66a2cf-22c7-4742-80db-6a0b721fa584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c2:50:e0:fa:e8:44:8d:84:a9:04:68:ed:73:
                    43:cd:e1:00:3b:d6:6f:bb:ae:e5:ab:8d:47:77:99:
                    d7:62:bc:44:a6:65:4e:ba:85:4f:a7:7e:02:f1:df:
                    9e:67:19:d2:6b:a9:22:66:4a:0c:dd:c2:f8:5e:74:
                    44:61:e2:75:e8:05:94:18:9f:99:e7:0d:44:89:82:
                    e6:12:f9:c4:92:1a:dc:51:aa:3a:11:2c:e4:42:32:
                    98:17:5e:b9:2b:4e:19:a0:bb:9f:a5:48:1b:0b:a6:
                    f7:1a:ca:e3:2a:9a:1d:13:a3:4d:fe:cf:0d:88:60:
                    7a:1b:bc:72:71:42:bc:49:bc:58:8c:9b:ba:f9:fb:
                    2a:dd:64:0a:2e:91:bb:ec:55:e7:71:c9:14:13:fd:
                    c9:a7:7e:0f:7f:ff:2b:ba:f8:8c:ee:63:77:3c:a0:
                    40:71:87:ad:50:d7:d1:65:ee:79:09:be:b5:f8:13:
                    4b:96:75:69:76:2f:b1:91:dc:b6:ba:78:a5:ac:bf:
                    04:fa:c0:93:db:4d:b2:41:61:db:47:42:88:24:96:
                    91:a0:7c:f3:d9:ce:e1:9c:da:f1:b2:5a:1d:1d:5f:
                    b8:0b:8a:9c:e1:4a:d7:b3:bc:c0:d4:e7:18:cf:5c:
                    7d:fe:63:e1:38:17:b1:31:c0:27:09:d5:2e:9a:0d:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AE:E9:77:9C:F8:46:24:51:D6:22:E4:E9:00:A8:6E:72:76:F4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl

            X509v3 Authority Key Identifier:
                keyid:9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:d9:3f:04:a2:35:e4:cd:17:22:ac:e5:5a:90:e2:a4:de:5b:
         c5:36:c2:98:f0:1b:fa:11:93:f5:63:93:12:00:49:c5:fa:cb:
         14:87:01:9c:c4:78:c2:53:2e:f3:88:5b:66:bf:73:29:49:5a:
         66:2c:0e:f3:a3:da:70:f6:e4:25:33:fb:af:35:b1:79:9d:90:
         c0:53:a2:4a:78:6c:52:b7:41:a2:fd:4f:e5:b6:ae:bc:82:bc:
         e5:11:a2:23:86:b7:66:6f:9c:70:b2:b0:f9:5e:bc:da:81:be:
         0c:f4:c4:0e:a3:5e:dc:9c:2f:3e:19:b1:42:ef:78:2b:84:55:
         fa:4b:49:76:b3:14:a2:7d:c8:89:8a:9a:52:12:db:7b:13:b4:
         bc:37:25:89:ab:a7:af:e0:e6:f6:1a:de:ae:6f:07:db:10:11:
         93:3a:60:71:72:33:87:42:a0:39:c7:ed:34:ce:dc:4d:3b:f8:
         88:aa:df:0e:28:13:c4:dd:8d:16:8c:e5:c0:72:28:0e:6b:3c:
         d2:3c:77:ee:a7:14:d8:99:ed:5d:f2:d9:77:af:7a:da:cc:af:
         42:09:f6:c3:87:23:cd:ed:ab:1c:f0:74:f0:57:cc:1f:70:85:
         98:60:ba:e5:d2:3e:ae:22:73:3e:84:e7:60:5b:75:48:88:2a:
         a4:eb:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:28:39 2026 by rpki-client