Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/4b05dd4d-153e-35e9-a66e-eb5794f5a1c4.roa
File:                     4b05dd4d-153e-35e9-a66e-eb5794f5a1c4.roa (raw, json)
Hash identifier:          Ef7qezgQjV+bZNTGJXju3Rgd01JPH38j+95G6MI5hJI=
Subject key identifier:   A9:A4:28:83:81:2B:4A:4C:00:E6:19:01:33:D2:5C:BC:48:62:DE:57
Certificate issuer:       /CN=04d439cc-e13c-43bf-a782-47c58b71fb3e
Certificate serial:       010D0C9F4328584EA0158D6FFAD8BD4CF540C800
Authority key identifier: B9:72:50:E4:6C:95:5E:6B:09:7B:DD:74:2F:EC:1A:93:71:0A:BF:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/4b05dd4d-153e-35e9-a66e-eb5794f5a1c4.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     398567
IP address blocks:        2602:fd2d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/04d439cc-e13c-43bf-a782-47c58b71fb3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/04d439cc-e13c-43bf-a782-47c58b71fb3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:8d:6f:fa:d8:bd:4c:f5:40:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d439cc-e13c-43bf-a782-47c58b71fb3e
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=a022a7ba-654c-4944-a67d-b87b4690283f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:ee:8c:b8:a4:02:61:e0:90:14:7e:ac:c2:
                    ea:95:e5:52:46:39:f5:c5:4e:77:54:81:cd:79:32:
                    18:cd:5b:2b:4e:db:b3:de:8f:74:7f:8b:38:85:be:
                    65:73:4b:39:85:ec:87:9b:35:be:ab:bb:e9:2d:7b:
                    18:8a:6a:db:92:e5:0b:2f:18:39:ec:15:1c:ec:4b:
                    3c:f7:fd:14:48:3a:5f:f3:0e:e4:a9:fd:ed:5a:3b:
                    41:9d:99:f4:d2:f7:e2:82:9c:da:2d:a0:5b:ee:3f:
                    3f:49:2a:03:57:80:7f:f4:ad:5c:72:ce:1f:16:b4:
                    59:48:27:9b:be:85:ae:b4:59:64:58:a5:f1:ce:a9:
                    bd:5b:12:82:be:45:27:c6:23:eb:85:4b:ff:32:37:
                    f9:15:22:72:b3:3c:22:82:c8:89:75:a2:fd:72:c8:
                    b7:bf:d2:90:a3:5b:89:a8:cd:37:3d:98:63:b9:dd:
                    83:3f:89:ea:c8:2f:6c:f2:1b:de:f7:62:98:9b:1f:
                    af:b6:15:ef:f3:2f:01:d3:b9:bd:5d:5c:34:3b:46:
                    c7:7f:2d:04:d1:73:5c:ec:d9:30:0e:56:c0:26:ab:
                    7b:9a:62:29:2b:da:a6:c5:6d:28:a0:68:fb:4a:84:
                    8a:1a:6e:b5:8e:fd:f0:04:06:00:d5:75:2a:66:44:
                    25:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A4:28:83:81:2B:4A:4C:00:E6:19:01:33:D2:5C:BC:48:62:DE:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/4b05dd4d-153e-35e9-a66e-eb5794f5a1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/04d439cc-e13c-43bf-a782-47c58b71fb3e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:72:50:E4:6C:95:5E:6B:09:7B:DD:74:2F:EC:1A:93:71:0A:BF:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:2a:ac:9a:47:02:be:3c:dc:27:cd:73:07:a4:45:5e:3d:fb:
         c3:0a:cd:58:83:21:df:a1:d6:6a:80:40:2d:80:b8:88:c1:47:
         ac:8b:79:ba:ff:50:0d:8e:38:f5:82:3a:60:d3:fb:42:7e:0e:
         92:ef:f9:d2:3e:87:97:46:90:74:5e:5b:27:f7:6c:ba:fe:ff:
         33:3c:ac:d5:bf:81:6d:79:d1:75:48:8a:2b:5a:f4:21:45:3c:
         6b:7e:1f:47:84:52:f7:08:44:32:47:ea:3d:73:80:98:66:52:
         b2:76:3f:b5:33:a3:a9:46:10:ba:1d:e8:00:41:23:57:a8:d4:
         24:19:82:cf:57:10:f5:83:32:46:88:3a:7c:0e:cf:4c:d8:8a:
         0a:a7:87:5f:2b:77:bc:f3:9a:3e:7a:b0:5d:5b:dc:8a:85:4c:
         d6:8a:db:ab:f7:d1:4b:0e:c2:fb:e5:e2:06:8c:a6:b7:04:23:
         d2:80:b2:5f:f1:56:88:3d:ac:bd:5d:ea:b2:a0:b5:c4:81:26:
         28:5b:94:72:37:98:5a:72:e4:7a:4e:de:24:08:24:8c:ca:c3:
         9a:fe:05:75:01:48:a2:60:31:2d:08:e8:90:ef:56:5a:ff:ec:
         c1:bb:23:fc:5a:a1:41:9e:61:de:78:dc:20:89:01:3e:f4:35:
         55:49:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:50 2026 by rpki-client