Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa
File:                     13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa (raw, json)
Hash identifier:          JYUkkIIBgdlXkV2nUrRmHdbVRiuGxwpljd4ybG1Z1Z8=
Subject key identifier:   4A:0F:F3:CF:B4:1B:EC:E9:DB:0A:D1:2B:97:BD:69:4C:4A:FD:50:EC
Certificate issuer:       /CN=b0b793c2-6ed4-4642-8683-e5b61e8d9f76
Certificate serial:       010D0C9F4328584EF9E20EB4FE27F56E27AB8700
Authority key identifier: 54:03:5D:9D:C6:C9:A8:AC:72:F6:C0:58:84:A6:E7:7C:07:BA:38:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     397301
IP address blocks:        2607:7580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0e:b4:fe:27:f5:6e:27:ab:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b793c2-6ed4-4642-8683-e5b61e8d9f76
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=484f2809-7f1a-466a-962b-d984f5103535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:ad:fe:db:3a:64:a8:c9:91:af:01:ed:5a:
                    42:98:84:60:c8:5e:5e:8d:3d:b8:07:99:47:2a:17:
                    74:79:b1:33:1d:f0:92:57:08:c6:90:60:72:4c:67:
                    b2:c2:08:93:ec:f5:d7:49:6d:bb:32:32:a6:26:8b:
                    90:9e:79:34:bb:ed:74:da:e9:5b:03:ac:a4:6d:6c:
                    c9:7c:ee:aa:d7:05:c4:c8:3a:08:08:13:3f:21:6a:
                    3c:7a:ac:bd:60:f8:f9:e2:64:e1:5b:8d:7d:af:45:
                    30:ca:bf:63:9e:f3:d0:31:3e:42:7f:36:44:af:66:
                    57:b4:ff:d6:62:56:5e:db:b7:32:c9:2d:2e:99:90:
                    f3:e6:52:e4:08:73:b4:5b:ab:b5:da:21:b5:5d:2f:
                    70:52:2c:5d:8b:e6:86:32:8c:26:2d:d4:5d:04:d2:
                    46:e9:f0:1d:7e:dd:16:16:bc:d6:53:7f:97:89:7d:
                    21:b1:8a:9c:3c:b5:c1:44:48:93:84:aa:31:b2:0b:
                    6f:cc:20:79:ee:0e:f6:35:61:0b:f8:0c:45:01:de:
                    0e:e7:60:db:33:e1:f3:6f:b2:53:55:3c:3b:eb:87:
                    b1:e9:1e:0c:4e:00:4b:5b:8e:c0:ce:96:9c:d1:4a:
                    d3:c6:94:47:89:a0:6c:cd:f0:0f:a2:5c:2c:8b:3e:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0F:F3:CF:B4:1B:EC:E9:DB:0A:D1:2B:97:BD:69:4C:4A:FD:50:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.crl

            X509v3 Authority Key Identifier:
                keyid:54:03:5D:9D:C6:C9:A8:AC:72:F6:C0:58:84:A6:E7:7C:07:BA:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:39:d9:88:20:fd:b1:fa:2c:c4:64:9e:58:0f:0d:5e:eb:8d:
         6f:75:8f:39:23:61:0f:96:00:c8:c8:ba:e4:e9:75:70:ad:8e:
         be:2b:ec:07:57:f8:34:d8:b9:88:10:13:11:46:0d:0b:b4:7b:
         19:b7:fb:c3:ba:e5:72:13:70:e9:29:9c:6d:f6:bd:d4:f4:04:
         18:80:30:d1:07:f4:fa:65:0e:a2:08:bd:21:3e:e5:8a:82:89:
         1e:95:f8:26:b9:41:1d:13:57:dd:e1:93:52:48:3f:a1:61:e5:
         df:52:13:f5:02:50:ed:01:82:09:1a:ec:d3:a5:c5:cb:8a:9d:
         0c:4a:32:89:62:dc:66:35:34:40:0b:75:88:2d:29:72:70:e0:
         7b:ae:94:ca:a7:77:4d:de:84:2a:f2:1d:8f:81:33:22:c9:99:
         ff:49:c0:92:b9:bf:69:29:51:fe:a9:23:cb:5c:4e:8b:4f:80:
         e4:d7:13:d4:eb:99:75:67:c3:76:da:bd:34:c6:b7:e4:92:b8:
         b8:ec:69:4b:75:8b:ae:92:fd:43:a5:96:ea:17:cd:5f:95:ff:
         1f:c1:9b:11:52:99:a6:11:07:8f:84:b3:c4:e2:9c:7e:ed:a6:
         4a:b0:f5:8d:e2:17:14:d7:62:5b:10:a0:0b:68:ee:01:a6:57:
         69:ce:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:49:20 2026 by rpki-client