Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa
File:                     c83d963c-2ced-33fe-8730-392675d7ca11.roa (raw, json)
Hash identifier:          RKxm1OKnA3kX4/5FxQ4dbiFa+gc2EGgBFbLtLThUDvU=
Subject key identifier:   20:5E:28:24:FA:28:BA:31:F9:C8:C8:5F:56:8C:6C:F1:75:AB:AB:E3
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F4328584EA788D9E278B7EB83AFEB9480
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5050
IP address blocks:        2001:5e8:0:1002::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d9:e2:78:b7:eb:83:af:eb:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cafc50b4-7327-49d7-a809-023b290715bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:50:54:12:65:92:b5:58:6a:29:e0:0d:29:
                    d9:57:9e:08:cb:e3:fb:00:a1:76:5e:04:ba:5e:23:
                    22:28:dc:41:ca:68:0b:36:3c:35:ed:b5:6e:39:a4:
                    27:92:9c:57:5a:ea:ca:cc:0c:9c:f1:c8:d1:3f:1c:
                    36:5e:74:ef:8a:1f:10:2f:57:79:08:d6:05:56:31:
                    d6:ac:90:58:af:0d:5b:15:28:ec:c6:ec:f9:99:5c:
                    4d:bb:05:81:10:18:24:f0:b9:3b:ab:c6:95:13:a8:
                    9e:7a:15:d9:dd:15:8a:1b:5d:fa:f4:27:08:8a:05:
                    9c:6f:11:0b:ea:ff:38:bf:3d:56:d0:f3:1e:2b:2c:
                    6b:1f:44:42:70:bb:ea:d4:c2:1f:84:ba:5f:fb:90:
                    a3:8f:ac:1c:ca:c0:98:9f:a3:a2:72:fc:ea:11:4b:
                    57:b7:c3:af:c4:20:6b:d8:2e:73:f3:f6:ea:09:c9:
                    c0:d3:0b:70:ae:87:5e:9d:28:b9:50:9d:5c:2c:f4:
                    a3:d3:d1:fa:ed:56:fd:6d:c2:6e:7a:c1:55:5c:46:
                    4a:8d:7b:9b:e6:92:bd:94:42:d5:14:32:b5:ca:d3:
                    98:d4:19:43:66:4c:fa:4f:14:80:2a:6f:c3:37:68:
                    3d:06:9c:de:e7:34:eb:de:bc:7a:df:25:ff:eb:42:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:28:24:FA:28:BA:31:F9:C8:C8:5F:56:8C:6C:F1:75:AB:AB:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:0:1002::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:82:2f:cb:05:d6:e5:dc:e4:4b:7a:e6:e5:86:80:16:28:a2:
         fe:5b:f9:05:e6:61:f2:ed:94:46:f0:94:ed:96:e1:9c:f3:36:
         e7:c4:d5:3d:6b:42:48:4a:61:82:12:ad:8c:b3:43:af:0b:bd:
         5c:6f:1c:54:f3:93:fb:e1:f1:5a:0a:ec:ba:5c:22:a6:32:57:
         3b:6b:4a:86:22:fa:72:fe:f2:50:68:1d:e3:73:06:79:28:d4:
         7d:06:54:93:30:1b:f1:40:d2:f6:d9:de:96:8a:ef:ab:93:e0:
         a6:07:6d:c2:85:de:3f:38:99:14:cd:69:4f:6d:dd:e6:7a:58:
         fd:45:39:5c:d7:e9:22:3b:e1:84:ed:5c:c8:02:80:f3:8a:c4:
         14:e2:b4:c0:0f:41:42:35:de:f2:bc:5a:12:bb:5f:b0:a9:53:
         3d:9a:5c:2c:bc:0e:2c:2e:a3:e9:7b:75:31:8f:52:7f:c0:eb:
         2c:d2:1e:90:23:e7:42:b4:aa:70:1d:ac:95:81:17:ac:f4:50:
         8b:d1:82:87:aa:67:59:67:1e:41:3a:ea:5c:1c:c0:48:ce:27:
         cf:41:15:63:f2:a2:cf:77:75:8f:06:e7:7d:c7:86:3f:07:61:
         c4:22:16:ce:78:0a:59:ea:dc:2f:bd:ab:c5:89:52:32:0c:86:
         dd:46:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:31 2026 by rpki-client