Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/053ee818-e26b-3e69-834c-c3455b78c570.roa
File:                     053ee818-e26b-3e69-834c-c3455b78c570.roa (raw, json)
Hash identifier:          N01gzbkvejEQXo6oCbshNAPxl8ojOUviRwmpDc19+PY=
Subject key identifier:   94:E5:9E:14:9B:AD:DC:88:F0:2E:E0:CC:4F:14:8E:19:FF:15:77:D9
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584EA78717D38470A5FD50DB0538
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/053ee818-e26b-3e69-834c-c3455b78c570.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     28110
IP address blocks:        2606:f180:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:17:d3:84:70:a5:fd:50:db:05:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=36e00e41-6480-4f16-a9f1-6305326cba15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:5b:16:1d:11:c2:dd:5c:a0:7e:62:d7:1b:
                    dd:60:88:c1:ea:93:70:51:98:75:00:fd:fc:56:ee:
                    49:59:4f:f4:94:d3:12:c0:17:a4:70:6c:25:00:3a:
                    c1:85:3b:b4:e2:cc:86:bc:b7:0e:ac:07:0f:d1:d0:
                    ad:b2:f7:c1:b9:8f:45:85:1d:e1:4c:e7:86:76:a2:
                    a2:b3:c4:50:ea:3c:32:3d:84:15:f2:85:00:cb:4b:
                    08:46:7c:87:bf:42:b0:53:c6:10:fb:e2:a2:ca:ae:
                    dc:8f:21:1c:6a:fa:71:91:7d:5d:c4:55:26:1f:3f:
                    90:bd:a6:87:8e:42:fa:d0:8f:7a:bd:fe:da:b4:1a:
                    6d:0c:18:7e:21:1f:c2:a5:0d:30:eb:6b:e1:0e:b3:
                    52:b5:98:3b:59:d0:59:ec:55:e3:7a:53:63:37:90:
                    3d:fc:3e:ba:36:1a:78:ca:45:83:b6:18:4c:3b:32:
                    a9:04:fd:19:89:ce:dd:ed:3d:b3:ea:9f:ea:c2:85:
                    09:9e:e4:f0:ae:04:af:91:1f:d9:b9:09:d4:00:71:
                    98:45:24:cb:47:6d:ce:a5:19:31:a6:5b:2c:5b:26:
                    95:35:e5:89:23:8f:b0:d6:c6:4a:fe:f3:51:33:91:
                    d6:56:5d:68:86:db:c9:29:10:6d:e5:a0:f2:4a:28:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:9E:14:9B:AD:DC:88:F0:2E:E0:CC:4F:14:8E:19:FF:15:77:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/053ee818-e26b-3e69-834c-c3455b78c570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:16:5e:a3:a8:01:e8:3a:ad:db:4b:11:42:f1:88:16:91:08:
         cb:3c:1e:c6:6a:16:45:2d:83:f9:e4:73:9b:53:9d:c9:53:f1:
         39:2d:ba:2d:fc:f5:3b:70:e1:01:87:cd:58:cb:2d:76:2e:d4:
         0b:10:1c:b8:8b:fa:00:03:ba:04:49:74:39:ea:c5:0b:7e:32:
         a3:05:ca:84:13:6b:31:b2:42:03:2d:c1:14:2c:63:64:97:50:
         17:49:fe:f8:60:71:a0:6e:85:65:42:11:33:1b:b9:0d:cd:1f:
         6a:04:9a:b8:37:bb:cd:52:2c:43:cc:27:2c:86:c7:d1:28:7f:
         92:be:7e:cf:1e:b7:bc:72:b3:5e:5b:8a:fb:c7:ae:38:09:7b:
         90:68:11:d7:d2:27:b7:56:26:4a:89:66:77:5d:15:10:31:b4:
         a8:d3:6a:21:3c:bd:b2:49:9e:7f:ea:59:f5:e2:15:98:d6:1e:
         9d:b0:e5:15:4c:24:ba:a7:12:be:2c:f5:98:86:8d:d0:b4:24:
         90:16:6b:db:8d:b1:3f:76:5c:d9:cf:10:82:00:55:d4:81:23:
         d4:95:a2:82:6d:f8:7d:f5:eb:66:58:30:c5:6a:1a:4d:ab:75:
         86:a9:36:dc:db:6d:2d:c4:3d:89:8a:8d:3b:fb:ab:74:86:a8:
         e6:7a:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:26:38 2026 by rpki-client