Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0eb699f0-d26e-339c-8d33-655398830750.roa
File:                     0eb699f0-d26e-339c-8d33-655398830750.roa (raw, json)
Hash identifier:          XgWuh2t7Drwimf6oIHUWrhCxmphUe25uMATdKHZg8qw=
Subject key identifier:   04:83:DA:24:9F:94:C8:77:8C:6E:98:6B:CF:E6:20:6A:A7:5C:FC:BF
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584E66DA0BF0FE744DF79E69D408
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0eb699f0-d26e-339c-8d33-655398830750.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     211481
IP address blocks:        2605:640f:bcd7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0b:f0:fe:74:4d:f7:9e:69:d4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=d09f9f5f-46f4-493e-a7f3-ea628abe55cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:f4:af:ba:76:f2:66:da:4d:f6:e7:d2:63:
                    b1:57:77:12:08:73:92:1b:e5:6d:d4:98:d4:61:29:
                    08:a6:8a:94:a3:21:f8:77:a3:33:33:37:05:96:9b:
                    10:72:45:82:2b:06:cc:6e:56:9a:65:1b:5e:d1:c1:
                    ab:98:c9:f5:80:75:48:5f:20:58:2c:14:f5:7b:bc:
                    0e:4e:ab:63:b7:f7:0d:82:a8:5e:48:de:18:41:5d:
                    12:29:ca:d4:9a:fa:8c:67:52:4f:8c:a3:87:c4:95:
                    d7:6a:92:ce:27:3d:be:bc:31:85:cd:ac:45:25:15:
                    62:de:e0:dd:f6:c7:1a:93:fc:18:76:8a:d6:bf:ff:
                    41:b2:66:0e:9b:7d:c2:6e:3b:6c:c4:cb:79:08:ad:
                    2f:c0:ee:14:a5:2e:3b:60:60:e8:a8:0c:23:bc:b9:
                    41:86:e9:4a:a4:88:11:44:4b:f2:8f:20:86:f5:18:
                    80:a1:62:de:a0:85:59:22:d5:34:2e:a9:2e:4d:3e:
                    b3:87:15:2f:24:c8:cb:7e:21:01:8c:78:94:f8:3d:
                    ac:c8:a5:96:71:fd:fd:51:52:3d:65:e9:20:f3:56:
                    3e:51:ae:f8:e8:ca:8c:00:15:ad:08:29:a6:f8:f7:
                    5a:73:06:2f:82:1c:eb:be:58:84:2c:e5:ce:24:a0:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:83:DA:24:9F:94:C8:77:8C:6E:98:6B:CF:E6:20:6A:A7:5C:FC:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0eb699f0-d26e-339c-8d33-655398830750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:640f:bcd7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8c:5f:ef:6c:df:66:6b:8f:01:9d:97:d8:02:29:c4:be:4c:
         3c:2f:a0:f3:5e:95:15:8f:2b:be:3e:e2:cc:f8:8f:27:51:ce:
         4b:e2:60:da:7d:f9:62:24:44:39:5f:42:86:9d:64:a0:f7:78:
         2b:18:9e:0b:bf:9a:63:b4:6a:45:b3:91:8a:26:fb:14:c2:62:
         6e:9f:d9:8b:0e:f8:1c:e5:0b:cd:b7:9d:18:7d:21:42:94:2e:
         96:b0:a2:14:bd:0b:64:6c:71:d8:1f:4d:54:72:97:35:4d:42:
         43:b3:32:f4:ea:0c:0c:bb:5c:51:16:11:a3:70:38:2c:b2:c5:
         b8:31:24:b5:8c:e8:f0:12:4a:97:6c:93:6e:42:f1:24:20:a7:
         b3:2d:30:e5:2b:bf:bd:ce:64:c1:7b:ec:41:9a:20:e3:56:43:
         19:44:14:94:52:a8:3b:0f:37:a1:b3:db:63:3d:8a:40:94:91:
         b0:5b:22:86:af:bc:c2:90:73:8e:e4:1e:35:97:95:75:9b:77:
         c2:95:26:97:81:ed:b9:c4:16:99:1c:8e:66:c3:eb:5a:ee:45:
         6b:07:27:71:39:3a:30:34:78:6e:01:fc:35:b6:de:9c:66:77:
         78:88:e4:06:8d:64:c1:e3:84:b8:94:90:65:74:64:7f:7a:64:
         e5:63:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:49:59 2026 by rpki-client