Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
File:                     1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa (raw, json)
Hash identifier:          +PxWOYTJyGfxZsHND15hLt41qTj6rFVPLgdR9lpfa3I=
Subject key identifier:   30:72:9B:CD:DD:F9:FA:8A:D6:48:80:33:1A:A0:F7:60:64:A8:C9:94
Certificate issuer:       /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial:       010D0C9F4328584EA798E4C90ADE05F509D08D00
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     55230
IP address blocks:        2604:c580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e4:c9:0a:de:05:f5:09:d0:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f5f58ebf-b185-43b8-9eb7-fc2c9fd1056c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:c1:a3:76:17:b8:61:55:ea:95:47:37:9b:
                    72:b0:ca:11:85:2b:95:26:fa:75:ba:a8:ff:56:17:
                    21:19:a9:b2:4d:ed:30:74:41:b7:49:1d:90:97:88:
                    18:d1:a6:83:04:64:66:dd:c6:57:41:e1:a3:71:76:
                    cc:a6:90:fe:93:40:7a:ba:af:96:b4:2c:6e:f2:dc:
                    61:3b:56:c6:db:5d:30:16:80:a4:4d:75:7f:38:cd:
                    87:e3:27:fb:6f:93:85:d0:fb:ec:07:74:81:ed:60:
                    e2:11:8d:c0:3c:75:58:8d:b4:19:08:a2:8d:1a:e0:
                    42:a4:dc:19:e3:aa:c7:51:7c:65:cb:23:15:4e:a6:
                    a2:8c:58:28:b9:26:2a:a4:99:5d:cc:2b:1d:46:58:
                    c4:0a:92:bb:7b:73:53:48:f5:be:5f:65:85:0c:1e:
                    37:10:0b:68:3d:47:2b:fd:31:7d:7e:3a:b1:03:73:
                    bf:4f:1f:6a:68:bf:79:55:c1:18:f7:3d:1e:f4:87:
                    31:71:87:e8:2e:89:d7:dc:30:ac:48:f6:8c:d6:ec:
                    84:e9:51:3d:6d:99:8c:36:2f:28:4f:7b:b7:1d:60:
                    90:11:17:3b:0b:c5:6a:c6:d5:83:5c:15:46:47:bf:
                    26:1f:c5:e4:a9:43:c6:50:8e:9e:9c:42:22:90:a5:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:72:9B:CD:DD:F9:FA:8A:D6:48:80:33:1A:A0:F7:60:64:A8:C9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a8:a1:44:7e:58:55:a5:e5:f1:21:2c:d8:91:87:b8:21:96:
         cb:95:5c:36:c8:e9:8f:45:12:bb:d1:c2:92:e6:2e:fc:da:93:
         84:e3:f8:4b:6d:32:9b:03:17:76:50:a2:ba:81:91:e4:9f:40:
         4d:5a:54:f7:7d:d3:ee:9d:77:95:f7:f9:76:e4:c3:15:31:ad:
         1a:99:73:1c:fe:17:dd:14:c7:58:18:38:3e:03:46:8d:f1:c3:
         cd:82:4e:a7:4a:d0:25:21:f1:29:9e:7e:6b:12:40:cc:78:0a:
         0a:f3:fb:00:be:ab:89:bb:f6:cd:87:c4:39:01:7d:cd:d6:51:
         04:d7:f4:08:27:e3:2f:4b:8a:71:4c:ea:e0:e4:66:6b:6d:1b:
         17:50:a1:2d:87:7c:4f:bb:12:8d:92:08:d8:f2:b8:ca:20:ef:
         02:2c:96:58:10:85:0a:2a:7b:d8:1b:54:de:a8:c7:8d:0c:b8:
         ab:dd:2f:09:39:65:74:50:d1:9d:a1:77:24:7e:24:a2:5b:ad:
         16:f5:d9:66:52:6f:76:31:43:3d:2c:7a:fc:14:4d:65:18:b2:
         9b:81:c2:64:ba:eb:fc:83:87:bb:94:90:2d:ef:4a:3c:a8:b0:
         ab:06:cb:07:1a:f7:34:2e:07:ee:0c:ab:3e:2f:31:28:c0:cf:
         48:07:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:48:03 2026 by rpki-client