Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
File:                     2e58d574-11fd-3248-8d46-82d8c4d93007.roa (raw, json)
Hash identifier:          RzNQPDDzDtSoRQgpI3vQPBoKchwvHw1E+eYn4P17cfk=
Subject key identifier:   B3:8A:FB:9F:4C:D0:91:D4:BF:32:B9:8C:3E:F5:90:5D:A8:EF:E8:73
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584E9EAFE663167392E564BE1740
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     396026
IP address blocks:        2607:fc30:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e6:63:16:73:92:e5:64:be:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=ecb09309-0119-471f-b39b-46368eb06a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:b5:c5:c8:cb:05:fa:f5:79:ed:70:d2:00:
                    68:a5:c3:f0:6a:36:33:5c:38:19:fe:fb:46:f0:52:
                    94:04:c6:03:10:f4:89:47:af:8b:95:6d:d4:bd:00:
                    7e:0d:ef:e4:1a:d2:a9:43:a0:d4:e7:a2:68:34:83:
                    23:82:49:41:d1:14:81:56:0f:18:a5:cf:2f:8c:9a:
                    87:1e:9a:6f:5f:ef:c0:12:03:66:f3:3b:b6:c4:06:
                    60:d1:2c:39:2f:4f:5a:ad:c0:01:ea:e9:c7:54:e0:
                    63:7c:20:85:37:1f:ea:79:d1:58:18:2e:b8:6d:06:
                    81:2e:a7:76:51:0d:18:9a:96:11:37:6d:42:2d:c3:
                    68:9c:e9:43:27:9a:70:af:ae:5a:d7:53:7b:9e:0f:
                    86:cb:7c:74:cd:49:9e:54:75:cc:ce:a1:c4:8b:44:
                    91:b7:10:59:cc:23:8d:7b:5f:2b:42:d6:69:5e:fe:
                    ad:a0:fa:80:5c:9f:3a:80:53:43:75:6c:fb:9e:50:
                    ff:96:63:d6:88:2a:43:a3:22:29:1b:e9:bb:2f:52:
                    36:3c:9d:95:27:c7:98:f6:95:16:31:46:55:ce:a0:
                    42:99:e9:07:e1:8c:53:14:f7:b6:1f:72:36:3f:56:
                    cd:18:d5:2d:1b:bb:0b:a7:eb:2b:f2:d2:e6:8b:96:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8A:FB:9F:4C:D0:91:D4:BF:32:B9:8C:3E:F5:90:5D:A8:EF:E8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f0:60:92:64:f6:19:84:de:e4:43:ce:92:07:41:e8:7b:69:
         84:f6:c1:fc:eb:65:f9:7f:d9:08:18:ea:11:7f:18:3f:41:d9:
         8f:5b:59:47:1c:a5:5f:63:73:9f:f6:07:30:45:de:0f:5d:a7:
         4c:41:fa:72:aa:5f:2a:3c:75:ce:89:84:f7:d2:ea:c8:0c:37:
         9e:8c:3d:15:eb:71:86:9b:ba:ab:48:9a:d6:38:e7:72:48:d3:
         c7:77:7c:99:2b:5f:5c:03:52:e7:dd:67:35:c8:cf:7d:a8:30:
         48:df:3a:2d:20:3f:9b:c8:5a:ba:ff:92:3d:13:94:77:c4:9f:
         d2:6f:8e:d9:00:99:e4:02:a1:80:14:c8:21:81:0e:93:7a:ab:
         fa:0e:d3:14:54:81:9c:41:87:ff:bf:fa:c0:b6:7b:8f:4b:94:
         3f:49:37:5a:17:39:47:94:2d:74:4a:34:0a:f8:26:d3:45:e8:
         5f:4a:20:b8:70:cd:93:e9:1f:2b:48:3e:fd:04:1c:9b:69:3f:
         64:fd:5e:58:0d:f1:56:d2:88:1a:91:3b:d9:98:08:9b:91:c2:
         c9:a4:0e:f7:5b:84:3c:42:2b:58:31:4f:cc:f8:1c:aa:d4:00:
         46:cd:a1:b7:25:6d:f1:54:fd:e2:98:72:07:48:e9:7d:b6:26:
         7d:18:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:14 2026 by rpki-client