Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa
File:                     1834e5ab-df96-322f-8714-bb237eefecc1.roa (raw, json)
Hash identifier:          OVtozV75T8SEYIhnDbCoF15i3p2H/ZCxJ4nhtypywnw=
Subject key identifier:   62:ED:C8:8B:75:74:41:20:5B:6D:B2:E7:8D:06:7B:42:16:B2:EF:3E
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584EB8473F4616B0A3947D1D1FC0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     19637
IP address blocks:        2604:b040:518::/48 maxlen: 48
                          2604:b040:519::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:3f:46:16:b0:a3:94:7d:1d:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=04a3b9c1-3e4d-4d80-a87b-b909617081c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:97:9a:f9:b7:43:8e:3c:a7:9a:5d:12:c7:39:
                    27:ab:1d:a8:e9:26:60:ea:c4:0f:43:28:e8:e3:a1:
                    e5:c9:4d:90:62:a8:60:fd:fc:c5:c4:49:1a:9e:ce:
                    ac:49:57:30:f6:1c:01:72:dc:02:4b:34:b5:d9:42:
                    a6:05:2f:db:e0:6d:a7:65:c9:a2:98:f5:fe:81:ef:
                    c8:28:0d:97:7e:7c:fe:60:dc:13:48:38:f1:68:48:
                    c1:82:47:f1:fb:b4:d9:b4:6a:e1:8c:c6:d4:8f:83:
                    83:17:1a:87:68:94:da:4f:9d:42:90:54:48:3f:b3:
                    08:0b:d9:8d:09:a9:d1:76:10:00:98:70:92:8a:9e:
                    50:a5:74:4c:6e:57:c5:91:76:d1:ab:23:e2:5b:7c:
                    50:44:36:88:2b:93:bd:31:4c:f4:df:b0:f5:55:20:
                    3e:ea:c8:85:8b:4d:7b:7a:9d:42:fe:2c:ea:ea:b7:
                    e6:b0:d9:02:8c:36:24:7f:8d:fe:63:bd:10:b3:ed:
                    43:59:3a:f0:0a:b5:5e:99:71:8d:fd:3a:f8:33:de:
                    78:55:19:f3:82:3f:fc:1a:15:90:c3:a6:0a:37:d8:
                    97:7a:f4:7c:21:ff:d0:2e:9b:9d:4c:0a:32:b5:c8:
                    2a:89:71:c3:e1:6f:fd:29:42:86:71:24:02:d5:99:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:ED:C8:8B:75:74:41:20:5B:6D:B2:E7:8D:06:7B:42:16:B2:EF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b040:518::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ab:57:cc:c3:20:84:c5:60:10:06:5c:fe:06:a9:37:b1:b1:
         3f:1b:4b:ba:fe:c4:e9:1b:2b:55:69:1a:2e:2e:7f:d5:65:7a:
         8c:26:7d:60:12:32:97:06:7f:10:b2:c5:7d:8b:ee:ad:0a:16:
         8d:e1:a0:3f:08:c3:b3:a0:ea:6b:00:41:fe:4d:e4:4a:9b:76:
         08:a6:d9:87:7f:bf:0b:23:92:6b:34:a8:e8:b9:c1:1c:fa:48:
         15:60:a7:73:12:23:83:f5:07:87:d7:50:3f:48:ab:f6:9e:73:
         6d:14:c8:e5:ad:d8:ad:5f:5b:e0:a4:c0:46:48:54:d9:ef:ad:
         88:5d:8c:23:09:68:25:f3:68:97:d5:45:a5:4a:2e:ed:7b:9d:
         8e:94:fd:12:74:f4:aa:ca:39:a8:52:13:2b:38:de:90:2a:a1:
         bb:ed:ca:34:9a:94:33:20:7a:8f:15:56:61:30:45:88:4c:09:
         bd:5e:19:21:39:43:94:90:f6:6c:27:f7:56:0e:00:63:26:e1:
         e1:2c:51:f0:c4:06:78:cc:26:34:70:e1:68:86:42:f4:e0:c8:
         08:62:95:55:64:6b:5a:36:14:0a:03:13:11:39:ff:02:7d:2e:
         3d:72:b2:b2:5f:e1:a8:5d:fa:16:e0:1d:42:2d:fd:41:1f:1b:
         b2:f8:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:52:33 2026 by rpki-client