Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/c523154b-c7f2-3606-a21c-a30854fcb6bb.roa
File:                     c523154b-c7f2-3606-a21c-a30854fcb6bb.roa (raw, json)
Hash identifier:          m9ByvYEasdPADBt+xIy+qRk9FuAUIP/DqIBCOGfqFC8=
Subject key identifier:   BE:BE:A6:B2:AE:3D:A0:D2:7F:20:FD:FD:EB:0A:35:F7:F3:07:DC:5E
Certificate issuer:       /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
Certificate serial:       010D0C9F4328584E4DB9DB19017864EF03BA8DC0
Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/c523154b-c7f2-3606-a21c-a30854fcb6bb.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        2620:117:507c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:db:19:01:78:64:ef:03:ba:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=639b86ab-5212-4cbf-994b-3a2caab13ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:4b:92:fd:e7:fa:10:92:8c:9d:6d:30:cf:
                    a0:7c:db:80:09:70:60:fa:5a:57:ec:cd:f6:d5:2a:
                    67:9f:11:fe:e4:5e:c0:3f:4a:19:67:51:31:68:24:
                    53:fb:4f:2b:80:fa:57:02:e5:5d:80:29:d9:71:1a:
                    f4:1c:98:bf:7c:bf:a5:72:b8:81:04:2e:f8:be:1f:
                    40:16:ae:94:ab:87:45:b2:bd:de:63:ee:96:67:73:
                    c9:5c:a5:89:74:1b:29:d0:58:27:b2:c5:07:aa:09:
                    7d:64:12:46:18:2e:77:f5:89:ff:2f:72:ce:e6:2b:
                    cb:e2:bb:cc:d3:86:c9:8f:62:1e:66:77:17:0b:64:
                    57:7a:49:2f:a6:ba:c1:54:75:1a:48:0c:d9:00:e9:
                    ce:60:85:39:b3:31:d9:8f:91:0f:3c:e8:d4:be:7c:
                    32:28:55:d8:af:7c:21:e7:44:12:a9:66:f0:7c:ec:
                    19:50:d9:18:ca:5a:dc:b1:b5:84:de:80:db:ec:d2:
                    33:ab:f3:a2:d5:b2:9a:e6:7f:5c:f1:c4:0e:d3:a3:
                    17:58:43:be:46:57:c5:2e:5b:9c:ad:e7:fb:46:a6:
                    34:35:9e:44:e8:7c:98:34:77:7f:76:a2:e9:05:79:
                    a0:fb:49:87:6d:9a:b0:c7:5c:94:07:3a:29:ff:5b:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:A6:B2:AE:3D:A0:D2:7F:20:FD:FD:EB:0A:35:F7:F3:07:DC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/c523154b-c7f2-3606-a21c-a30854fcb6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl

            X509v3 Authority Key Identifier:
                keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:507c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:17:7b:b4:d4:c4:be:57:85:43:05:c8:67:33:a8:94:f9:
         ea:fc:fd:a2:f6:29:21:91:a6:d3:d9:8f:08:be:30:45:25:cf:
         38:3d:48:76:57:7c:95:30:71:b6:f2:cd:d8:10:f1:34:82:3f:
         58:84:11:ed:9f:10:d8:66:96:a4:1a:66:4e:6e:36:40:f8:8f:
         b9:5e:bd:cb:dd:c1:95:53:a0:35:d5:87:cf:a8:3d:f3:87:2a:
         46:8b:ef:12:72:2a:96:c7:3c:a3:54:fb:f9:95:5b:1d:dd:48:
         de:52:8b:2a:3f:b3:87:46:63:b7:aa:0c:47:64:4a:a3:17:b5:
         c8:4e:70:32:f6:03:d1:e6:eb:96:0a:e3:ce:8e:23:f3:03:13:
         be:61:15:00:c7:8c:f4:b0:c3:d6:cd:bd:8c:f2:68:4b:e1:f4:
         e0:61:86:fe:7c:11:4f:84:2d:e7:43:aa:17:da:fd:a5:e1:e6:
         53:ce:8c:3f:31:99:88:d3:0b:84:5c:b1:6d:a0:56:e4:d4:79:
         d6:db:a5:d8:e2:e7:7c:c6:69:a4:a7:22:b6:50:b6:ed:42:ec:
         2e:31:49:72:eb:ba:d9:50:7a:37:20:ec:6f:fb:71:40:d6:ed:
         1c:09:e7:c9:df:7c:2c:b7:20:49:ed:e0:4c:ef:28:70:3b:9b:
         62:f4:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:18:30 2026 by rpki-client