Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/e050f2ea-4ae3-32fc-ad84-6767a3a1a913.roa
File:                     e050f2ea-4ae3-32fc-ad84-6767a3a1a913.roa (raw, json)
Hash identifier:          amfGguXMX2HihPwFxmbb3pKnNTQT68I1zsdjPiN2F50=
Subject key identifier:   B4:0A:13:FD:98:71:43:EC:E9:BD:FE:E5:22:B1:1D:9C:E6:7B:8F:EA
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584EE691022CB968E187AA1E8000
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/e050f2ea-4ae3-32fc-ad84-6767a3a1a913.roa
Signing time:             Thu 20 Aug 2026 14:56:36 +0000
ROA not before:           Thu 20 Aug 2026 14:56:36 +0000
ROA not after:            Wed 18 Nov 2026 15:56:36 +0000
asID:                     55286
IP address blocks:        2607:4300:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:91:02:2c:b9:68:e1:87:aa:1e:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Aug 20 14:56:36 2026 GMT
            Not After : Nov 18 15:56:36 2026 GMT
        Subject: CN=9754d94f-a374-485e-a26e-6066c72a36a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:76:6b:6d:c1:b0:82:f5:36:08:97:1f:b8:
                    0b:9f:78:31:d8:05:0d:81:97:62:e0:fe:f1:0b:51:
                    46:16:67:3e:a6:c6:b3:f3:dd:84:e2:d8:ed:44:42:
                    d6:72:67:f4:6e:14:20:c1:d4:00:62:68:d6:0f:d2:
                    72:1f:ba:74:60:eb:84:df:c0:dd:b8:2c:73:32:54:
                    0c:f4:6a:bc:d6:8c:25:44:df:e9:0d:33:36:48:8b:
                    61:e6:36:95:37:df:e3:0f:06:63:c4:ca:e1:11:52:
                    5e:6b:99:8d:f0:15:7a:08:fd:84:93:1a:86:ba:94:
                    ab:17:7c:f4:e0:91:2a:f5:db:47:ff:fe:e7:f9:a4:
                    6d:ca:5d:df:0f:e9:83:9d:9c:13:f8:53:5a:4a:2a:
                    13:2d:bb:f3:87:c0:0c:58:3a:d3:5a:df:94:20:9f:
                    1c:02:f9:6f:d3:ab:58:4f:42:64:4f:c7:18:53:17:
                    ae:64:b7:19:41:7d:dc:d1:4e:a3:22:9a:db:ea:b9:
                    aa:7d:4a:9b:fc:6e:12:5a:f0:a2:c1:64:0d:f0:5b:
                    74:ab:d9:c7:b2:3a:ba:80:91:72:18:3b:9d:c1:8c:
                    7d:d6:32:f0:d9:0e:a8:19:f1:94:68:6a:71:65:e8:
                    66:e5:dc:5c:a1:23:4c:d2:f9:73:17:38:1a:ae:ec:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0A:13:FD:98:71:43:EC:E9:BD:FE:E5:22:B1:1D:9C:E6:7B:8F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/e050f2ea-4ae3-32fc-ad84-6767a3a1a913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4300:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:73:4c:29:d1:cc:83:7c:4f:1b:dc:e6:7f:6b:ff:97:b6:
         c6:09:c6:39:7d:91:c1:eb:a2:9c:6d:58:e4:21:c7:0c:99:36:
         ad:a7:81:d9:a6:ab:13:5f:25:d1:36:d9:f9:2d:ed:28:8e:78:
         27:f5:99:fa:a5:ff:47:bc:20:b6:44:4b:1a:69:9d:c1:b8:89:
         45:a7:68:9d:15:33:17:30:d6:a5:fe:ff:3c:2e:88:24:05:83:
         dc:43:07:b9:d7:f3:d8:19:2f:18:13:d7:42:9d:13:39:a7:cd:
         fc:70:05:5c:f0:e9:5f:b5:37:33:2f:ec:b3:51:9e:60:67:19:
         0e:29:9e:68:7f:55:e0:05:81:16:07:18:02:b9:a6:31:f5:78:
         90:7e:65:cc:21:54:d8:15:31:30:96:3d:00:92:eb:91:39:9b:
         95:7a:9d:6d:da:27:26:39:96:72:94:02:52:f1:25:17:82:3f:
         44:aa:bd:6c:cc:74:70:ba:42:3a:f3:08:99:31:d7:b8:23:4d:
         c1:c1:30:57:89:d4:dc:ae:73:d4:11:9e:4b:ae:b6:e5:a9:17:
         9e:c0:6a:20:dc:e0:21:f7:8a:d1:e3:b0:c1:98:cd:35:67:c2:
         37:fa:d6:59:ea:9e:b8:a0:66:f4:64:ea:ba:02:86:64:01:51:
         fc:0a:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 17:16:17 2026 by rpki-client