Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa
File:                     786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa (raw, json)
Hash identifier:          oVzewBskoJHlOmxxEIVzRns5JqBowBiDzdJVcYsTlTg=
Subject key identifier:   58:B1:14:9E:B9:7B:B6:9A:04:08:DE:10:09:FA:28:A2:59:CE:57:2D
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584E1FA9A182DC830E4A4FE19780
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     2495
IP address blocks:        2001:49d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a1:82:dc:83:0e:4a:4f:e1:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=a2489e69-09e7-4ea7-8604-b67a99e601b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:f8:35:8f:d9:26:49:6b:d0:e7:95:8e:bd:
                    78:98:f8:94:af:e1:5a:c7:5f:3a:57:80:e1:09:e3:
                    02:7b:f5:42:ea:6d:41:3c:72:be:cc:c5:03:cd:b3:
                    85:36:49:fd:0a:62:b7:99:cb:24:b1:44:30:58:79:
                    a4:db:48:8f:36:48:b2:a2:b6:27:4b:ff:80:c5:1b:
                    24:05:eb:94:a0:da:33:2f:c9:fc:8e:62:20:19:1a:
                    6f:b3:95:47:7e:13:d7:e9:8d:46:e0:77:91:2c:57:
                    a9:8a:3a:c7:52:62:91:15:6d:4b:08:e7:b5:ae:d4:
                    73:80:bb:b3:81:b7:46:e1:c1:c9:46:4f:f8:10:08:
                    a4:2f:4a:34:8e:e9:37:80:85:34:04:f8:a1:56:c9:
                    74:e8:f7:1b:83:8c:a8:42:58:3e:93:a5:fa:4e:28:
                    27:8a:71:f8:93:42:6b:4b:2c:23:ed:b3:54:8b:8a:
                    85:14:4a:1b:f0:a6:63:1c:1c:16:72:cc:0c:b6:69:
                    6b:c9:c5:11:d8:a2:4b:33:16:50:77:8c:46:7d:f8:
                    5d:4b:e6:9e:a2:cc:47:a9:4a:47:08:e3:ee:bf:2e:
                    a7:f1:32:50:dd:e2:3e:98:71:9d:8b:45:40:bc:e2:
                    54:4b:1a:40:00:19:d1:2f:8f:ff:a2:83:0d:1c:90:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B1:14:9E:B9:7B:B6:9A:04:08:DE:10:09:FA:28:A2:59:CE:57:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:89:77:30:48:92:d0:03:0a:ef:08:95:92:fa:d6:75:3a:
         8c:47:49:05:6a:33:9b:15:b7:5f:2b:8f:47:40:70:1f:6c:e5:
         81:91:f5:80:8d:1c:b4:9c:f2:e5:99:84:64:35:66:c4:96:fc:
         4e:7b:4e:0c:1b:99:ee:33:00:0a:81:d0:f5:b3:8a:1f:bd:87:
         a4:17:a3:ed:76:5b:1a:8b:63:a3:05:d0:38:1c:d9:84:af:fc:
         fe:83:8b:bf:5b:ea:f0:01:68:40:0a:76:17:fc:b7:91:df:90:
         3a:e4:05:35:94:a9:a2:46:0c:8d:b9:55:7a:da:21:d4:68:97:
         c5:a0:92:08:0c:9b:d2:0b:3b:1e:f8:1f:5a:d6:52:d2:49:c4:
         f2:4e:33:bc:bf:9b:c1:61:38:68:da:fa:67:ab:0a:c9:64:bc:
         b0:88:ea:2f:ff:df:a4:59:c4:e0:8e:62:d2:f0:91:bc:61:90:
         f9:37:24:8b:1c:b5:c0:6b:0d:f4:15:60:3c:ae:6c:63:41:09:
         f1:2e:a4:ee:ee:2c:f4:0e:6b:69:b3:a7:2a:fb:e7:65:38:ab:
         73:ed:87:bd:90:02:80:4f:4c:a9:69:c7:e6:e5:c2:50:39:3b:
         f7:9b:f7:73:0d:f9:d8:9c:70:cb:9f:d8:2d:02:b3:33:34:91:
         1e:57:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:25 2026 by rpki-client