Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/bab7c9fe-bb9c-3bed-bfb9-1bc6520f030c.roa
File:                     bab7c9fe-bb9c-3bed-bfb9-1bc6520f030c.roa (raw, json)
Hash identifier:          SbmXdfAsRaD8OCHNSQbelvYsX663gO7ElLnA7rxcaFM=
Subject key identifier:   C2:4C:4F:45:07:D8:E2:BB:B7:E4:58:4E:F4:1F:B6:F3:E7:66:64:03
Certificate issuer:       /CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
Certificate serial:       010D0C9F4328584DE2B5E6FA6E8083A85C0DAD00
Authority key identifier: 7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/bab7c9fe-bb9c-3bed-bfb9-1bc6520f030c.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     0
IP address blocks:        2001:504:39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e6:fa:6e:80:83:a8:5c:0d:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=b8c0186e-773c-43f1-896d-bc6c058feca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:a5:7a:cb:32:66:51:33:1e:f8:2e:26:60:
                    78:78:0c:3f:ef:9a:09:10:8a:ca:3d:8f:82:18:de:
                    22:2b:da:a6:78:db:35:68:fd:7d:ca:04:c6:b5:c8:
                    3b:f8:b8:93:87:d0:20:b0:b4:48:23:97:82:b0:b0:
                    60:70:50:a8:07:cd:9c:61:26:58:ef:af:b4:b0:62:
                    d8:0f:03:e6:2f:74:99:ca:73:ce:5e:9d:b9:22:c9:
                    76:e5:67:ab:d1:e9:8b:0c:ed:ab:1e:70:9d:ad:03:
                    d2:3f:6e:b8:08:e1:df:24:8c:b4:a6:ab:e2:19:8d:
                    38:28:e1:4c:79:27:a6:62:7d:03:3c:a4:3f:6a:60:
                    0e:bf:38:71:36:5a:2d:76:5e:66:80:86:9e:f1:e4:
                    6b:48:c5:e3:2f:eb:fe:d3:85:ec:69:ce:c6:29:9a:
                    0c:f2:d2:df:5f:19:df:3e:81:e1:b1:a7:3a:81:7a:
                    62:7a:ff:9c:52:cc:f4:69:51:81:d6:6f:df:fa:ca:
                    43:1a:e2:8b:48:f6:57:e9:49:63:fb:4b:39:de:98:
                    63:e9:17:bd:27:15:a1:5a:86:b5:3a:c5:40:74:79:
                    1f:1f:3b:b6:93:88:1a:ba:ba:b9:c8:40:b8:20:96:
                    cc:97:54:0c:96:40:97:d3:54:ac:5d:b4:d7:d8:6c:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:4F:45:07:D8:E2:BB:B7:E4:58:4E:F4:1F:B6:F3:E7:66:64:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/bab7c9fe-bb9c-3bed-bfb9-1bc6520f030c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl

            X509v3 Authority Key Identifier:
                keyid:7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:39::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:7a:99:19:e9:33:be:07:2c:78:f1:fb:d3:23:e0:e1:39:
         5a:64:c3:53:84:61:5b:9a:9e:6a:c9:cc:06:07:68:57:2a:45:
         f4:8b:3f:f4:87:55:cc:be:1b:58:73:22:22:ec:81:26:4b:d2:
         3e:6f:0a:b5:ab:3c:ee:63:51:48:6f:42:94:47:f6:01:43:ef:
         f1:8d:fb:15:d8:88:06:e3:0c:91:ed:34:f2:b3:3a:3a:01:2f:
         5d:10:38:94:f0:5e:7c:04:6a:1e:55:d7:8d:c6:0e:b1:35:aa:
         f1:75:86:eb:8e:6b:b6:d5:74:db:6e:a2:ac:5b:f3:80:89:34:
         36:ee:9c:51:66:aa:db:80:c5:f7:1c:74:68:be:3e:e7:c5:bf:
         c0:c9:56:32:1e:2e:40:16:d7:01:e4:c3:82:93:a2:97:55:62:
         7f:92:07:32:d3:42:59:97:c1:3e:7a:3f:06:40:43:7d:7c:13:
         ba:8f:97:15:27:16:5e:a1:57:6b:a1:84:60:5e:0d:e3:a8:76:
         47:4e:09:f3:cf:59:c0:0a:50:32:2d:2f:e7:46:a6:32:67:d2:
         e9:f2:53:f5:95:e6:5b:1d:e6:18:63:36:da:44:ad:2a:7a:c4:
         ec:bf:09:75:b7:06:a0:23:3d:cf:7c:06:dd:be:d7:4c:93:ba:
         50:b8:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:30:34 2026 by rpki-client