Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/b5bb8275-ad50-34e4-a199-80db31a4fbe0.roa
File:                     b5bb8275-ad50-34e4-a199-80db31a4fbe0.roa (raw, json)
Hash identifier:          CW7wi4gIs+DGWLbQZxjFFPr1nuXY0uXS26fwtr67h0Q=
Subject key identifier:   7B:59:DE:87:B2:E4:78:12:65:BF:62:66:B1:EF:73:FE:90:58:E9:0A
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584EA791A5BF3AC0BF712BDC7400
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/b5bb8275-ad50-34e4-a199-80db31a4fbe0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20454
IP address blocks:        2607:6002:200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:a5:bf:3a:c0:bf:71:2b:dc:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a2be5a1a-b96c-4acd-b56c-fec76859ed2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:40:36:0d:08:94:9f:08:eb:89:e2:c8:f4:a9:
                    e8:b5:07:67:df:77:ba:04:0a:db:89:7f:64:b5:1a:
                    8f:d2:df:6a:25:a4:24:be:b9:2e:bd:fa:35:a5:24:
                    3c:78:40:51:a9:b7:1f:ce:2a:f2:bd:e4:6e:b8:cc:
                    66:e5:23:f2:bc:64:99:6c:83:af:98:84:6c:88:47:
                    cd:2a:20:3a:1f:da:c0:e8:15:84:3f:26:34:34:50:
                    5b:36:08:97:8e:9b:2f:b6:30:21:db:52:03:41:c0:
                    63:5e:ce:3b:93:06:13:fc:0a:da:ba:73:d7:d7:0f:
                    8b:bf:fa:63:2d:a3:f8:26:7c:66:95:95:c6:b8:ee:
                    2c:f5:6e:9e:b6:3f:6a:93:17:da:93:e2:15:f1:bc:
                    53:98:88:ae:4b:94:ef:96:28:ca:01:74:72:1e:8c:
                    45:5a:51:5a:75:b3:7f:8d:91:a7:b0:1b:6f:d3:0c:
                    73:ea:58:de:e0:e7:9e:d7:89:ce:61:f2:45:43:91:
                    1f:32:8f:15:9f:d1:75:9f:27:c5:e6:e8:f5:fd:3c:
                    b9:44:c5:e5:1c:b4:35:09:cd:83:f2:ed:6c:6d:9d:
                    b5:59:41:22:bd:a5:3a:87:65:3b:35:b2:4f:24:b5:
                    97:ad:dd:50:97:21:49:2e:6e:51:6f:a9:e0:c8:22:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:59:DE:87:B2:E4:78:12:65:BF:62:66:B1:EF:73:FE:90:58:E9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/b5bb8275-ad50-34e4-a199-80db31a4fbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:89:57:d4:bd:01:f2:6a:fd:85:2a:9e:7d:c7:2e:bd:72:f0:
         2b:2c:2c:02:e1:78:82:2a:bf:a1:18:e4:af:d5:18:17:d1:05:
         a2:57:42:20:a2:1f:46:03:07:9b:c6:0e:94:6f:91:97:1d:3c:
         7a:50:f4:2b:77:05:8a:7a:27:61:48:34:89:de:c7:7c:62:cf:
         6c:5c:57:be:f8:e0:6b:19:8a:dc:7f:87:2b:6d:f4:43:2c:cc:
         ca:ce:dc:e4:69:ca:6a:a5:82:49:f2:dd:90:54:a4:6c:fc:f9:
         78:33:24:e3:14:66:44:15:4c:4e:c3:49:81:78:69:96:4b:3b:
         20:2b:5e:0c:11:b2:ca:36:fb:98:ee:a9:bd:2e:99:b2:04:4b:
         95:d8:ec:f1:5f:0b:6f:c6:c3:e5:29:80:0d:05:64:e0:ca:26:
         c9:39:5d:4d:07:a6:e0:11:e3:c8:39:f2:56:7d:dc:a2:72:d2:
         02:e7:01:04:6e:ea:04:74:80:05:4f:97:9f:fe:31:5f:e3:4c:
         05:69:bf:df:89:e8:fa:ba:46:de:16:3d:99:56:bf:93:a8:97:
         59:e9:72:ef:be:72:92:00:59:dd:6b:3f:09:1f:8d:a9:c7:a8:
         44:16:99:8b:69:dc:60:ad:e1:50:ad:6c:26:b2:c4:42:d7:08:
         01:33:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:57:15 2026 by rpki-client