Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/72ddf868-6503-3586-9e8a-7983ce18f54e.roa
File:                     72ddf868-6503-3586-9e8a-7983ce18f54e.roa (raw, json)
Hash identifier:          7B+tS3DWT/wGsITJP9AaQCh71wX7S+vBzViwT1G4qLE=
Subject key identifier:   73:5D:D9:E4:2F:F0:2D:D2:9B:42:8B:4B:01:AE:97:07:90:9D:58:1E
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584EBB11AFA46BE2BD2AD2C6F600
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/72ddf868-6503-3586-9e8a-7983ce18f54e.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     5744
IP address blocks:        2610:20:5012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:af:a4:6b:e2:bd:2a:d2:c6:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=478a0c19-414a-45ee-aeb7-973a6e2dd052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:4b:e3:77:58:ab:9b:d0:c2:97:9d:1e:e7:
                    66:0a:d8:18:4f:35:ad:55:2d:a1:b5:ed:42:d4:cb:
                    b3:05:ad:dc:e1:d4:59:ca:61:a0:55:9a:00:5e:a2:
                    04:81:65:c2:38:69:4a:cc:8c:49:7f:b2:d8:9e:5a:
                    e2:0c:dc:47:33:7b:e8:e3:8a:44:c6:c3:69:c9:78:
                    05:84:5c:94:e0:60:da:f8:47:10:a6:56:2c:1e:03:
                    7b:d4:10:9f:a7:8f:f1:e9:56:90:41:08:42:af:fc:
                    ae:90:83:2a:cb:24:9c:43:d2:89:f8:cf:29:3e:46:
                    68:b9:2e:8f:c2:cd:9d:3f:3b:0b:ff:18:4e:6d:ad:
                    a9:cc:ac:2a:c1:56:49:a2:be:74:2f:db:39:da:6a:
                    56:e8:2d:c3:86:5a:c0:f0:1c:ad:b4:23:e0:f0:6c:
                    32:d8:17:7b:9f:9f:10:16:79:a7:c2:64:dc:e1:b8:
                    cb:bd:c1:d4:9e:4d:5c:b4:03:13:6e:d9:42:78:20:
                    0d:0d:41:3a:69:44:8e:33:d5:83:3f:0c:7b:fb:2c:
                    7a:66:96:32:f6:7b:05:61:af:7f:5f:11:53:d7:e0:
                    2b:24:57:20:d7:4b:32:39:ef:17:36:5e:b7:61:69:
                    32:54:b8:29:e4:f0:ef:54:95:5e:48:9f:f8:32:c5:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5D:D9:E4:2F:F0:2D:D2:9B:42:8B:4B:01:AE:97:07:90:9D:58:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/72ddf868-6503-3586-9e8a-7983ce18f54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:88:ec:b2:10:70:51:10:b2:9a:d1:13:0b:1d:07:96:a4:41:
         92:ce:ee:22:d1:24:16:9b:45:4d:f1:a4:bb:59:9b:3a:bb:7f:
         f4:c3:e1:03:6e:70:cb:56:bc:60:0b:94:93:d4:33:8d:2a:5b:
         d2:86:3e:d7:b6:8c:88:ce:10:26:99:e6:a8:45:8b:e9:2f:c9:
         79:97:79:21:8a:e3:b3:2c:c8:22:07:b1:e8:de:0e:de:14:76:
         d4:fd:e1:cc:de:68:24:17:3d:76:9a:3f:9b:35:bd:04:d8:42:
         86:f0:94:a9:96:f3:eb:ff:10:e5:c8:60:3c:bf:82:91:40:00:
         0f:96:a6:69:37:2c:7e:02:37:55:49:91:9b:bd:f1:b8:51:c8:
         47:98:5f:40:a6:94:1d:df:6d:81:7f:97:ca:33:17:61:a8:d1:
         81:41:f5:c5:1f:be:6b:47:64:7c:5d:91:fb:1e:83:b5:a9:65:
         60:13:86:39:36:66:c5:78:bb:98:18:39:4b:87:31:fb:78:75:
         3d:bb:77:cb:58:95:74:da:71:27:40:fd:49:a5:17:64:28:d7:
         fb:b5:4c:60:0e:09:9f:79:0e:11:d1:38:0b:ef:2b:79:ee:9b:
         cd:54:2e:b7:0b:d3:a6:61:a4:93:46:df:b7:ed:ee:6e:12:4a:
         e7:67:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:43:44 2026 by rpki-client