Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
File:                     b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa (raw, json)
Hash identifier:          EQ5PjoGRMNLVsKA+RiF/9obdvlX66AA5Cs1aiBI/ozA=
Subject key identifier:   ED:4F:0F:F4:38:AC:45:60:77:F3:A1:34:C9:A3:F8:7E:A2:65:44:DF
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F4328584EA79D1001A4CEEEAFF6D146C0
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21538
IP address blocks:        2602:fc30:a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:10:01:a4:ce:ee:af:f6:d1:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=82a468ac-c4ae-4b81-8fcf-9f9f9436a77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:b1:db:32:19:b6:46:c3:e5:d9:4f:8d:84:
                    7c:9a:e6:2d:cd:ad:e3:8d:89:94:d6:c6:a0:16:90:
                    57:a5:8b:4f:f4:27:64:bb:fc:89:af:81:70:76:10:
                    bf:3e:70:56:ed:6b:2e:49:60:a6:ad:1c:b3:aa:fc:
                    80:de:83:49:69:e0:47:ab:88:fc:bc:50:f0:c3:cc:
                    3a:c3:cd:f2:c3:71:8f:15:4b:f0:4b:8c:36:cc:93:
                    98:e9:e7:ae:27:17:43:47:86:07:13:41:23:0d:11:
                    40:c9:22:9e:15:85:8e:05:42:84:fe:87:2b:d2:b7:
                    fd:ac:b1:3d:eb:f1:6c:f7:63:a0:a2:4a:a3:f5:06:
                    f7:13:1d:ac:4a:ed:8c:ff:47:51:b3:9f:04:25:24:
                    5f:75:5a:6c:45:2e:c0:cf:eb:d9:51:88:67:8e:79:
                    c4:cb:c9:36:fd:b2:55:4b:f7:38:50:20:d1:95:09:
                    e8:60:87:ec:86:97:30:1e:cb:06:61:d7:a3:c7:8c:
                    53:f6:fb:ab:89:86:75:0e:c8:97:32:b8:63:20:11:
                    6a:0e:14:bc:c5:c8:cd:c9:d5:59:0c:7a:47:f7:5f:
                    4d:14:9b:3e:56:d4:1e:63:2f:f7:e5:1e:00:f0:f6:
                    12:66:9c:47:16:5c:ab:a8:88:1c:09:f7:4a:cd:3b:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:0F:F4:38:AC:45:60:77:F3:A1:34:C9:A3:F8:7E:A2:65:44:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc30:a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:86:38:53:73:ca:66:28:e0:74:bf:23:8d:5f:b5:66:9a:d1:
         b3:5f:29:ce:06:dd:a3:22:86:6e:9f:cd:b2:75:27:76:df:07:
         fb:df:3e:61:3e:ea:89:4f:b9:ba:90:df:7a:62:e9:fd:00:58:
         0f:18:38:37:54:33:c7:6a:61:43:76:18:de:77:82:3c:be:33:
         67:06:24:5e:e6:e5:2a:98:65:95:67:55:71:14:73:ef:1a:e9:
         62:26:ad:49:dc:e9:67:95:3e:ae:e9:16:11:f6:37:d4:c6:3a:
         b7:30:fe:63:ca:16:9b:fb:8a:f3:a1:e4:b5:0f:cf:d8:74:48:
         34:4d:b1:87:ec:d4:e9:18:90:12:30:1d:09:ba:1d:7f:ee:9f:
         3e:f7:4c:7b:7c:e3:68:97:a8:32:d8:a5:52:eb:44:00:f9:de:
         0e:bc:f9:06:63:59:5d:03:73:48:d6:42:df:dc:ff:12:8e:cf:
         b8:b8:98:37:bb:ad:9b:a9:fa:9b:1a:1e:a4:40:9e:ea:25:dd:
         cd:f5:d0:cb:bf:83:46:6b:e2:88:6b:2d:0f:93:38:15:cc:fa:
         10:77:01:d4:b0:91:b4:c3:ea:d2:92:65:68:41:3d:37:cc:c7:
         3e:05:6f:0c:b6:25:a7:d5:a2:62:7d:75:53:95:c8:02:3d:e9:
         0b:ba:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:33 2026 by rpki-client