Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa
File:                     b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa (raw, json)
Hash identifier:          j7SSQEFoYihSA5Gci4rIlO+ZVZ5mbnLfRaF4FWuqDAU=
Subject key identifier:   0F:2D:72:E4:F9:41:94:B6:0A:38:21:62:9C:BB:5B:A3:CB:6B:09:D1
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584EA790115557FFA6ABAE14DE80
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        2620:1b2:6d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:11:55:57:ff:a6:ab:ae:14:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0afc7e20-ef92-4bb6-b96a-b3f273e99c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:f3:ce:04:66:16:66:78:35:ea:bb:8f:be:
                    2f:c3:09:71:98:72:d7:94:ac:67:97:6c:7d:72:71:
                    c6:c8:a6:33:51:8f:c2:df:95:9f:f3:b6:44:c7:b1:
                    e8:d6:97:d9:e9:fc:fe:79:b7:a0:dc:20:ec:4e:da:
                    e5:6d:68:22:21:4d:39:2c:87:30:16:c3:7e:20:bb:
                    02:09:af:74:b9:67:00:b0:7f:3a:c0:a8:df:51:9b:
                    b2:52:c3:14:cc:41:40:0c:bc:6c:0b:7a:15:4a:f2:
                    b9:95:57:0c:c2:ca:3f:21:79:7e:33:14:e6:21:4b:
                    14:3f:91:88:37:3a:52:16:7a:c5:eb:3c:30:33:83:
                    b8:5c:36:65:36:1a:40:48:8c:f8:2b:07:0c:25:a6:
                    1b:be:ce:42:8e:24:1d:eb:39:1d:ad:92:4e:41:16:
                    62:69:3b:ef:0f:37:8d:b9:ac:b1:40:8f:81:d1:6a:
                    70:97:b2:f2:54:e8:6f:de:a4:72:85:f0:58:da:e4:
                    99:b7:ec:1c:48:7e:28:1d:c6:19:ba:33:a2:53:75:
                    03:42:60:6e:9e:f9:7b:1c:41:1f:bf:df:72:9d:da:
                    cc:57:28:c6:9f:64:3d:a5:49:3c:7d:48:74:fe:a7:
                    88:ba:e5:d8:9c:05:a7:fa:57:15:65:4f:27:82:ee:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2D:72:E4:F9:41:94:B6:0A:38:21:62:9C:BB:5B:A3:CB:6B:09:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:6d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:58:bb:78:b6:e6:e7:8d:e6:ab:c1:cf:78:fa:1d:e6:0f:94:
         67:1f:55:f9:cc:13:36:d3:42:b9:eb:21:b5:ae:7a:4b:85:03:
         a3:35:e0:9c:c0:5e:48:c1:d9:bf:86:43:8b:98:4a:66:1c:c7:
         bf:58:89:f5:b7:3d:8d:c6:3e:26:1d:60:9f:30:d4:6a:5b:a4:
         da:67:a1:90:cb:a6:20:15:6b:b4:9a:48:23:b1:cc:29:d4:97:
         34:b0:b3:7c:87:a0:4c:e4:a7:b1:f2:b1:16:71:cf:a6:bf:8e:
         0e:9c:c2:c1:0b:7b:71:b0:9f:80:21:7c:82:06:f6:08:df:cb:
         18:24:3e:c9:05:55:f0:57:fb:47:94:0c:cd:0a:97:62:f5:c0:
         eb:c1:e4:76:92:b0:73:1d:b3:12:6f:26:81:85:7e:ab:8e:6d:
         95:69:98:71:0a:03:8a:af:bf:f9:ee:42:77:5c:93:cf:8a:f9:
         e0:cd:6c:70:03:e5:71:8e:70:6c:0c:82:3d:d9:6a:4f:f7:c3:
         0b:0f:fd:98:d3:ce:cb:51:17:e1:6d:5a:43:3d:94:6c:28:89:
         da:a8:4d:b1:6f:ca:05:27:ba:77:2e:3f:f9:e1:e5:57:1b:65:
         35:a2:c5:ec:af:0e:c3:ca:70:e5:85:09:56:36:7a:af:ff:fc:
         0f:82:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:09 2026 by rpki-client