Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/8e93330e-22b7-3484-8faa-484a30b48584.roa
File:                     8e93330e-22b7-3484-8faa-484a30b48584.roa (raw, json)
Hash identifier:          O3W/jMSnYLsGnU4vxqt10liYiDAuTtGyCbG1uPzOA7Y=
Subject key identifier:   12:9C:91:EE:23:D9:56:F9:80:9A:08:BF:29:0C:AD:3E:1E:15:A3:5E
Certificate issuer:       /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial:       010D0C9F4328584E3764721D4D31322B5DF7B7C0
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/8e93330e-22b7-3484-8faa-484a30b48584.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16796
IP address blocks:        2620:b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:72:1d:4d:31:32:2b:5d:f7:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=ef3078e4-fdb5-46eb-9a11-7be0ed38bed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:14:e7:76:42:87:65:4c:90:5b:0b:52:c1:65:
                    19:d5:c2:f6:10:10:80:c0:f3:9d:9d:59:62:a5:d4:
                    8e:a1:ae:aa:df:b0:86:e3:1c:a6:78:56:cb:c0:b9:
                    a3:86:d8:95:7c:8b:4e:51:b7:d9:96:de:d1:53:06:
                    6c:b0:09:7e:77:ff:24:c6:70:c8:2b:4b:83:49:2b:
                    7e:bc:2a:c3:23:6b:62:cc:25:85:4f:54:6a:9b:77:
                    e6:80:6a:b3:5e:45:47:74:5a:16:de:17:4d:60:81:
                    62:61:f5:bb:ec:f9:4c:85:1e:26:73:fc:2c:32:37:
                    d3:88:0a:71:e7:33:80:ff:d1:2e:4a:4a:60:1b:75:
                    a6:09:85:35:f9:7f:f4:11:45:b5:64:b7:52:c1:b5:
                    da:03:64:f3:08:1f:f9:eb:4a:ac:df:96:a5:2f:6a:
                    37:8a:dd:86:69:9f:6d:a6:14:89:f3:a2:28:2b:f3:
                    ac:f0:68:da:82:f9:e0:e6:6e:92:59:8c:82:af:da:
                    7b:ea:18:6e:fe:ad:a0:94:d3:ae:ce:72:86:ff:3a:
                    8c:13:14:b9:05:c2:53:c1:56:50:0d:f2:a3:e6:21:
                    ce:5f:74:6f:7f:14:c6:e0:85:41:cd:b0:a8:72:e5:
                    4d:cb:cf:03:ee:44:b0:31:19:78:b7:94:05:37:4f:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:91:EE:23:D9:56:F9:80:9A:08:BF:29:0C:AD:3E:1E:15:A3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/8e93330e-22b7-3484-8faa-484a30b48584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:0e:fb:60:1a:35:22:a0:a2:0c:4c:00:a1:ff:ef:52:ae:
         73:6b:34:9e:4a:19:8f:52:a9:20:6e:4f:d3:c2:a7:73:06:74:
         ee:d9:97:da:dc:22:2c:c8:9c:4c:ee:35:42:21:5e:59:4b:d7:
         4f:1d:ea:53:8b:fe:65:52:ed:e5:d7:70:82:e1:2c:57:d5:a8:
         55:45:4c:60:73:d4:d8:7e:5c:3c:88:dd:7f:e9:0a:30:d8:3b:
         b3:c6:d3:2d:6f:0b:3f:72:11:59:b7:fa:16:f4:80:a8:82:6e:
         c2:9a:44:b7:d7:8d:2a:65:8f:ef:a6:6d:0d:e5:84:80:80:e7:
         b3:a7:2d:d6:5d:40:e9:bc:3d:85:d6:de:f2:6d:a2:ab:58:d7:
         56:91:b3:c2:a2:0e:3b:77:18:31:2e:9c:de:94:c5:ae:9d:88:
         56:f4:9d:e5:e8:18:9c:56:b4:ce:f7:c7:c3:de:83:34:38:05:
         1b:1d:fa:39:a9:2b:2b:df:d7:32:8d:b7:2c:b4:32:27:b7:bf:
         62:fa:bc:7f:f6:81:be:aa:4e:91:20:8f:d6:4e:9c:3a:95:cc:
         dc:30:b6:db:53:b4:a5:81:27:61:df:7c:e4:6f:af:5a:38:86:
         1e:f8:34:b5:85:a9:ab:4e:58:97:bd:cc:50:82:33:78:b8:b5:
         e7:43:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:35:47 2026 by rpki-client