Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa
File:                     d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa (raw, json)
Hash identifier:          wxXAtV/Se/iXY1nsScHaB+0am7+D4awK9ndPfHGPMvg=
Subject key identifier:   BD:72:42:F3:F0:18:F7:6E:5C:5E:BD:F1:7C:0A:A4:07:CE:41:8A:1C
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F4328584EA7887FC5DFF210977DA3CCC0
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2610:e8:3180::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:7f:c5:df:f2:10:97:7d:a3:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fe0c4f15-a048-4d66-ad17-229b370a77c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:d6:72:6d:3b:c7:30:e0:78:b8:e7:fd:18:
                    3b:cf:7c:f8:d2:79:e6:a4:25:43:71:87:cd:d5:4f:
                    76:f5:ce:ad:d5:99:0a:79:9f:14:92:64:57:26:d3:
                    4e:ce:63:fc:1f:2d:cd:0f:20:01:9e:fb:8e:1a:a8:
                    cd:36:9b:5a:29:93:5a:ee:09:2a:1a:42:24:ef:fe:
                    74:2e:e7:f3:ce:35:df:43:fe:16:85:78:6c:9d:59:
                    fe:ad:e2:ac:b4:f5:26:9d:6a:f0:7d:bc:51:8f:1c:
                    4b:74:4f:5a:3b:2b:f1:82:fb:19:e9:2e:11:51:ef:
                    22:53:49:ef:dd:e1:a0:cd:cc:61:eb:b2:bc:cc:60:
                    89:ee:2c:b8:51:ee:5f:90:3d:d9:f1:a6:fd:7e:59:
                    fe:0f:ee:5e:a6:28:6d:5b:a4:0d:a1:13:b6:c2:11:
                    3f:af:c7:d1:f9:1f:82:cc:1b:6e:e6:30:bc:2e:e7:
                    ca:8f:e7:24:93:1a:30:39:52:a7:1d:d2:52:9e:f4:
                    28:1a:9a:fb:25:c7:b9:ba:4a:7c:79:62:86:22:12:
                    46:5b:01:8b:ca:26:82:ac:fe:be:75:11:f5:42:9a:
                    c7:db:56:dc:43:4b:60:28:a6:79:51:26:2e:83:0c:
                    b7:39:e7:c6:a7:2c:e4:ef:35:20:11:49:4e:7f:d2:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:72:42:F3:F0:18:F7:6E:5C:5E:BD:F1:7C:0A:A4:07:CE:41:8A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e8:3180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:7a:5d:19:9e:46:4b:f4:72:0a:28:84:e1:68:e5:7e:4d:
         c5:bf:7c:b3:93:17:f9:50:6e:6c:65:d0:9f:6d:89:ff:61:8e:
         90:13:2f:c0:71:7a:7f:63:dc:45:d0:38:7f:fa:2e:70:1e:a2:
         ba:86:e2:45:1b:5b:76:bc:28:c9:5a:06:41:28:45:70:f2:0f:
         0d:2e:04:2c:f5:30:58:fd:0c:6f:32:94:46:02:e3:d4:42:fb:
         81:0f:0c:50:60:bb:14:f3:7f:a0:38:03:91:8f:59:5c:d4:3f:
         be:6b:8d:28:80:67:53:aa:aa:21:bc:c2:3e:20:dd:85:f1:af:
         b2:dd:54:d7:3a:d3:30:27:37:b1:bd:00:f1:e8:be:54:7d:8f:
         5d:c8:a7:8d:48:8e:aa:f9:00:28:f5:38:7d:56:72:3b:e4:1f:
         34:81:97:1b:73:fe:bf:eb:55:5a:6c:08:8e:cb:d2:c8:00:54:
         d1:e5:7c:9e:75:1a:99:e1:9f:9c:09:94:fb:db:9b:2a:ac:71:
         94:2c:fa:1e:ef:22:ff:92:5e:25:c8:e6:44:e4:89:fe:31:31:
         69:b3:80:63:24:7a:89:5f:03:a5:00:4a:7f:33:14:fd:60:4c:
         ae:44:7b:78:85:b9:a2:f0:57:b9:ce:89:6e:e8:3f:b4:64:b1:
         a2:07:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:45:34 2026 by rpki-client