Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa
File:                     0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa (raw, json)
Hash identifier:          FjiZ4fvezr5X/UQizvlv0yceDnm9zgzbkl/419OEMOQ=
Subject key identifier:   CF:D9:F4:3C:E3:0E:85:0D:73:51:8F:64:8A:D3:90:63:95:8D:45:FB
Certificate issuer:       /CN=c503e4cc-4b3e-4fed-a3d9-8586590e8da1
Certificate serial:       010D0C9F4328584E6C6F7559F28AA339C29DCC80
Authority key identifier: E4:97:69:0D:53:01:0F:3A:E0:7C:23:21:CD:86:14:B4:31:15:F3:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     8075
IP address blocks:        2602:f4d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:75:59:f2:8a:a3:39:c2:9d:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c503e4cc-4b3e-4fed-a3d9-8586590e8da1
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=695248c4-4fe2-4f09-9f4a-545d9a4c7893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:0a:73:30:a0:cc:03:2f:6a:ce:fa:16:f6:
                    10:9a:05:06:9a:a0:53:6f:9a:8d:09:84:0b:9c:1c:
                    1f:c3:82:19:75:13:db:8f:1f:07:dc:93:de:f6:7f:
                    87:64:b4:49:17:e3:89:04:2f:28:cc:7e:a2:ae:03:
                    5f:c4:fc:8b:13:5b:b1:ac:e0:73:f2:09:d2:2f:67:
                    d5:07:4e:cb:68:88:a9:da:a0:c2:54:f4:ff:c5:0e:
                    95:25:04:e6:e0:84:bb:c6:95:d7:dc:8b:a0:67:b7:
                    8e:6b:04:8e:29:69:06:97:76:4a:de:b7:e9:23:d8:
                    dd:63:0b:9a:68:23:2f:f3:7d:0b:51:c3:e3:19:94:
                    58:42:0c:cc:59:3b:28:32:c8:a3:b4:e2:86:1d:ff:
                    d3:3a:1b:0b:d1:8b:6a:29:6f:af:ed:e7:e4:bd:3d:
                    32:34:03:7f:08:ee:ee:e8:85:67:a8:98:69:39:0f:
                    29:ef:e5:e7:ff:d7:30:56:3c:cb:8c:17:31:98:35:
                    28:cd:08:3f:5d:ca:92:eb:50:5c:01:6b:f4:be:5b:
                    82:08:ed:56:37:9b:f1:76:a4:9d:a1:35:6b:e6:3a:
                    24:64:c9:a4:07:ac:b7:76:c0:27:18:43:a5:9a:cd:
                    50:ee:5d:55:d8:11:bd:31:ce:b6:26:70:39:f7:32:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:F4:3C:E3:0E:85:0D:73:51:8F:64:8A:D3:90:63:95:8D:45:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.crl

            X509v3 Authority Key Identifier:
                keyid:E4:97:69:0D:53:01:0F:3A:E0:7C:23:21:CD:86:14:B4:31:15:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:5f:48:44:03:b2:d2:11:77:ee:45:fb:ff:8e:88:5a:91:
         c8:8f:73:27:ef:c8:ca:a1:ae:e9:75:0b:e2:82:8c:a1:40:48:
         ff:19:ad:25:80:3f:47:25:d2:c4:87:3b:af:5e:2a:d6:ee:49:
         40:0e:5c:ff:f0:59:4a:3a:b0:86:e0:eb:b7:ad:88:95:69:75:
         a5:8d:e4:23:e8:2f:b8:39:9b:b0:e1:80:d4:b1:d5:8f:2c:3f:
         05:2f:f2:41:fd:32:f4:59:4e:83:c4:56:5c:f3:87:07:80:4a:
         97:51:7b:fb:3d:c2:6d:ab:58:33:36:80:e3:ba:31:fc:3d:46:
         21:c5:3c:ee:a0:cf:11:de:4b:7b:a3:f8:5f:35:99:84:ee:80:
         39:c4:02:e2:db:40:59:bd:ab:3e:1e:65:35:41:48:82:21:68:
         91:7e:68:d7:aa:d4:a2:24:67:b7:f1:6f:ae:dc:b0:a8:e9:3e:
         7e:38:09:aa:c4:08:25:0b:62:23:19:28:b2:a3:73:b3:4c:77:
         a4:0b:f1:38:8d:e0:e4:c7:b0:51:71:29:29:20:7b:48:bb:c8:
         8f:56:d3:f5:6a:59:74:ee:ee:bf:33:d7:e3:91:75:55:a9:c4:
         b9:e7:cd:46:38:b2:20:13:21:02:8c:8a:84:f0:95:21:9f:f1:
         c0:43:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:47:47 2026 by rpki-client