Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9f62cfcf-e458-33dd-9326-1b5075b4cfd0.roa
File:                     9f62cfcf-e458-33dd-9326-1b5075b4cfd0.roa (raw, json)
Hash identifier:          6rcRHVuYjc9Nkd5k7MjP4chgf/ilA2OyHSdbx0nI8eY=
Subject key identifier:   A9:DB:B1:CC:0C:78:DB:AF:7F:BE:E3:AF:DD:CE:F6:59:B2:6D:44:0E
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584E640F61354A5135343301868C
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9f62cfcf-e458-33dd-9326-1b5075b4cfd0.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     53667
IP address blocks:        2605:6400::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:61:35:4a:51:35:34:33:01:86:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=8f21d060-af53-405e-ac4c-470630a7930b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:7f:1b:83:b8:7a:93:16:79:6c:41:39:d9:
                    06:20:0a:64:cc:1c:9e:4e:07:4c:c2:dc:4d:37:70:
                    fb:de:56:b1:af:a6:7d:4f:eb:bd:80:ad:eb:55:47:
                    d1:61:37:c2:7c:c4:d7:9f:5d:62:d8:b1:78:59:0a:
                    2a:f1:0c:37:a1:13:ef:f7:8c:3e:41:22:d3:09:ed:
                    46:e7:d1:41:6e:c0:56:e3:18:dc:a6:fa:3a:30:8d:
                    a6:6b:12:56:0e:89:be:f5:b8:38:94:1f:55:9f:ba:
                    cd:c5:03:b5:29:b3:12:88:cb:58:a6:a0:4b:32:1b:
                    df:12:91:9b:24:96:fd:b5:25:12:05:18:ec:98:f5:
                    af:ee:c7:f7:bb:22:74:99:1e:45:2f:1b:cb:e0:ee:
                    fb:cb:14:1f:99:6d:d3:4e:78:d7:29:ca:f4:25:97:
                    c3:a1:12:dd:e2:f9:08:e6:52:aa:35:b9:a7:9f:0b:
                    58:50:04:1f:5b:b9:91:91:b9:11:53:67:5c:58:93:
                    09:97:c1:1f:cd:fe:28:47:e1:c8:8d:48:01:78:f4:
                    f7:4a:50:7f:b7:00:4b:18:ba:17:3e:65:2a:3e:32:
                    c9:0d:55:93:c2:43:d9:d4:a6:3e:b3:65:dd:9c:99:
                    0b:b7:44:be:6c:7c:da:fc:86:d3:25:0a:92:30:a5:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:B1:CC:0C:78:DB:AF:7F:BE:E3:AF:DD:CE:F6:59:B2:6D:44:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9f62cfcf-e458-33dd-9326-1b5075b4cfd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6400::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7e:68:70:aa:36:78:03:76:c0:f4:a1:23:da:ba:a9:2e:85:
         b5:0e:62:28:c3:7d:1e:8a:96:d5:54:0a:b0:2f:56:12:87:c3:
         11:dd:99:9d:73:0f:5f:76:fe:30:c3:59:ce:d4:dc:0a:0b:ec:
         e4:25:bc:10:46:99:98:f2:e0:66:f4:8e:d5:67:62:b6:59:1b:
         83:57:ca:a3:43:47:69:7e:66:71:63:df:d8:e3:eb:56:01:da:
         ed:16:40:f7:8e:7b:a0:db:9c:c0:b6:27:41:49:a3:18:0c:5b:
         77:3b:8d:48:b4:fc:35:e8:97:b2:b5:4d:3c:be:ee:97:5f:5a:
         9a:ec:e1:c5:1a:99:f5:f3:46:00:3b:6e:01:81:38:3c:dd:01:
         b2:95:87:ac:35:34:2c:c1:1b:90:fe:52:b8:46:4f:9f:36:10:
         5f:40:af:d7:7b:b1:98:9a:7b:6b:ff:64:68:c2:9a:cd:8c:83:
         67:37:db:73:6c:15:05:7b:e1:50:98:b1:03:bb:24:d9:e8:6e:
         47:3d:1b:94:66:e3:17:90:62:72:0e:23:37:62:0c:7a:ea:5e:
         69:8a:1c:a9:81:37:ac:61:2d:8c:78:a8:33:bf:80:b3:1c:ca:
         8f:7d:17:de:76:f5:87:05:13:1c:ee:29:d9:4e:43:7c:90:38:
         e4:26:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:09:00 2026 by rpki-client