Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/50f316d7-2c00-3211-a507-a161224d3f3c.roa
File:                     50f316d7-2c00-3211-a507-a161224d3f3c.roa (raw, json)
Hash identifier:          V9c4ePBc7O9eE/7I9hkE219OzzQNGTx7+ERmvgWgiBQ=
Subject key identifier:   D5:BB:EB:E9:7A:7B:9A:94:37:3A:1B:EA:E9:82:72:CE:E1:2C:DB:B2
Certificate issuer:       /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8
Certificate serial:       010D0C9F4328584E6BCD145D535771433A5CDF00
Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/50f316d7-2c00-3211-a507-a161224d3f3c.roa
Signing time:             Tue 07 Jul 2026 15:33:13 +0000
ROA not before:           Tue 07 Jul 2026 15:33:13 +0000
ROA not after:            Mon 05 Oct 2026 15:33:13 +0000
asID:                     13335
IP address blocks:        2620:b7:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:cd:14:5d:53:57:71:43:3a:5c:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8
        Validity
            Not Before: Jul  7 15:33:13 2026 GMT
            Not After : Oct  5 15:33:13 2026 GMT
        Subject: CN=067a94af-e446-49ea-941d-88422716af56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:2f:ff:cb:b3:4a:94:79:59:4a:74:64:8d:
                    ec:68:c3:54:54:4d:ab:ac:c1:39:0e:da:a2:69:f5:
                    55:7e:73:ec:cd:59:87:ea:97:34:e3:fc:33:8a:36:
                    3b:60:48:68:1f:86:55:66:34:a7:6d:8a:ea:5c:68:
                    e3:0f:de:80:b9:13:e0:d5:5a:92:e2:fc:68:34:b0:
                    b3:48:d8:95:75:e4:f1:40:51:68:6f:0c:0c:26:8e:
                    66:85:ea:60:92:39:ac:95:4b:72:7b:7a:02:64:fd:
                    35:be:5f:11:d3:17:21:6f:37:65:b9:6e:10:88:4c:
                    dc:22:08:f7:e1:2e:35:90:db:82:bd:6c:28:77:fc:
                    bc:3e:b2:ab:22:bc:d4:ff:ec:b8:ca:8a:85:25:eb:
                    b2:38:58:4c:8d:b0:48:6b:f8:b1:88:67:1f:d3:29:
                    19:af:07:30:eb:85:54:60:62:96:b6:83:a8:7b:1c:
                    ed:24:56:e4:51:bc:8c:26:b3:eb:ae:e4:d7:65:7a:
                    2a:d9:ae:c4:da:a9:c5:1b:b7:93:7f:e2:89:88:be:
                    e8:05:03:52:12:6b:d6:9a:09:91:8f:ea:ca:fb:b8:
                    81:b3:48:ea:30:1f:7d:1a:8f:ca:fa:ce:d9:97:a8:
                    12:0c:c7:e1:57:48:5c:ea:57:c1:5c:72:1a:14:57:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BB:EB:E9:7A:7B:9A:94:37:3A:1B:EA:E9:82:72:CE:E1:2C:DB:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/50f316d7-2c00-3211-a507-a161224d3f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl

            X509v3 Authority Key Identifier:
                keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b7:2002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:bc:cd:32:16:a1:47:0e:1d:3d:72:50:e8:f1:72:08:9d:
         04:25:5a:0c:63:01:87:7e:97:36:3d:de:64:dc:72:9e:b2:e2:
         ce:96:f7:3f:fe:14:b1:e6:12:7f:42:92:b4:56:10:f8:c2:d1:
         e9:eb:35:fb:0c:2e:ae:ec:45:78:3f:4e:2c:e6:53:9d:ab:46:
         ab:d4:ee:ba:42:1c:42:85:e9:9a:d6:ce:8e:0b:af:0f:93:ec:
         98:a9:0b:2e:c9:74:ab:df:30:2b:fe:c5:c0:18:48:75:fb:7f:
         b3:3e:86:11:05:28:27:e5:fb:21:de:21:38:2a:ab:81:ee:e5:
         8d:2f:6b:4c:2b:35:23:45:1f:7b:e3:f4:fe:25:47:8d:75:b0:
         04:b3:bd:4e:e6:4a:3d:da:96:69:48:fa:c6:3f:8c:60:1e:8c:
         04:8b:6b:e8:73:2c:c2:c4:6e:be:ef:9a:94:9e:da:5f:f7:c8:
         04:5f:17:36:03:4b:df:3c:ce:d3:e5:38:ad:65:b8:48:e2:fa:
         f6:56:ae:76:de:42:2a:eb:60:22:73:71:2d:d6:dd:de:ac:56:
         8a:cc:0c:c2:19:f8:6a:ec:da:22:cb:89:dd:bd:d6:20:0a:74:
         85:57:5c:4f:94:4a:ef:df:47:3a:75:8f:8a:1d:db:34:ca:8f:
         1e:55:04:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:29 2026 by rpki-client