Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/03cb150c-e1e8-3f86-83a6-560a5b801f3c.roa
File:                     03cb150c-e1e8-3f86-83a6-560a5b801f3c.roa (raw, json)
Hash identifier:          /cwjwwFFPF7f2Kt1ULlh5jiyhV9SLGeZnBbqqMkcjg4=
Subject key identifier:   83:69:F0:03:3D:05:72:49:58:43:C3:2E:91:4F:DD:F7:08:1D:0E:CA
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584EA85354BED7BD4DE77A802320
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/03cb150c-e1e8-3f86-83a6-560a5b801f3c.roa
Signing time:             Wed 29 Jul 2026 07:52:13 +0000
ROA not before:           Wed 29 Jul 2026 07:52:13 +0000
ROA not after:            Tue 27 Oct 2026 07:52:13 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff4c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:53:54:be:d7:bd:4d:e7:7a:80:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul 29 07:52:13 2026 GMT
            Not After : Oct 27 07:52:13 2026 GMT
        Subject: CN=a02699c1-a7cc-4b33-be51-e775011c7a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:5f:77:d5:4c:81:d2:ac:ed:58:a4:56:75:
                    b1:6a:29:74:9b:e9:e5:2e:aa:a2:17:fc:f7:c8:f4:
                    4a:69:0e:59:c1:29:28:9a:13:10:b1:e7:80:24:e1:
                    f1:a7:f0:15:d3:c5:c0:77:f2:ab:88:20:93:58:2b:
                    87:ea:77:11:17:96:c8:1f:dd:30:62:c9:f5:67:49:
                    d2:81:06:e6:17:90:fa:79:47:19:5a:b1:46:a4:cc:
                    92:9e:4a:e0:91:d2:7a:5c:32:21:6a:36:4d:29:4c:
                    88:e5:dd:d6:57:09:d5:5c:29:af:0f:de:5a:65:8d:
                    d9:9e:00:3f:f7:23:72:1c:3f:cd:64:f4:9e:32:75:
                    7f:fc:26:58:85:89:71:c3:2a:f5:76:fe:db:5c:3a:
                    32:57:63:2d:e2:1f:8f:d9:81:1f:e6:36:7e:1e:8b:
                    82:75:bc:40:f1:38:c4:6a:da:b4:48:ca:20:a0:c0:
                    fc:c2:6f:ad:66:11:dd:f3:b8:48:d9:14:15:77:bb:
                    10:d0:47:27:28:a9:2a:33:f0:55:27:d2:db:e1:f5:
                    32:37:d9:d3:05:22:f7:6a:76:c0:38:15:ac:ba:a6:
                    cc:cf:0a:7b:12:c8:90:6c:e3:57:fc:38:69:06:5c:
                    6e:b6:79:ec:5c:52:4a:a9:87:6e:8a:8f:22:a9:9b:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:F0:03:3D:05:72:49:58:43:C3:2E:91:4F:DD:F7:08:1D:0E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/03cb150c-e1e8-3f86-83a6-560a5b801f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff4c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:de:ac:cd:f4:88:b2:19:8c:e8:08:31:1b:d8:52:8c:1b:31:
         e3:4a:c2:05:ac:0d:d1:e3:d7:b1:01:81:fd:0c:b4:00:12:bf:
         b8:1c:21:23:d3:a3:e7:99:80:42:ab:a4:29:9a:84:bd:c4:63:
         7e:be:93:8f:80:c2:d1:f7:4d:84:54:58:84:7a:f2:b5:68:58:
         f3:b6:fa:57:00:63:d7:43:ab:da:95:10:ba:7a:d7:43:e6:0d:
         c6:6f:60:8b:29:69:3a:52:0a:bd:d0:72:9d:0e:56:40:e7:a7:
         0f:04:ec:83:68:69:ae:1b:88:51:f2:b4:e6:b9:26:af:0a:81:
         3f:4c:b1:e4:03:fb:fb:eb:e8:c9:04:2c:52:7d:61:4f:18:ed:
         a0:f7:96:99:04:89:5d:e3:d0:d2:e2:31:3a:e5:9a:17:a8:8e:
         af:23:71:2e:7b:9a:15:31:d2:34:75:40:8a:a4:4a:75:ba:cf:
         94:d1:57:8b:c7:bf:59:9a:93:23:27:cb:83:92:0e:f3:22:b2:
         c8:0d:08:14:90:35:a6:cd:54:ba:1f:1c:41:f5:7a:17:8a:4f:
         1b:36:5e:54:0e:86:09:bb:39:f4:bb:88:86:db:76:7c:ec:8e:
         b0:a8:62:f2:b3:1a:e3:50:51:32:4c:f1:89:c6:97:0c:15:f2:
         ee:e5:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:47 2026 by rpki-client