Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7876bf40-fef2-36ee-b5e5-13d4eff36a51.roa
File:                     7876bf40-fef2-36ee-b5e5-13d4eff36a51.roa (raw, json)
Hash identifier:          d1OthHFxDhwl4xvTHmGEqmIGy3i6opbghel8Ui5ZKzQ=
Subject key identifier:   33:CD:F5:04:55:54:C6:33:0C:F6:24:3E:86:AB:C6:C4:6E:0C:C2:3F
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F4328584E9EAFE4D86C2149CD6CD64DB8
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7876bf40-fef2-36ee-b5e5-13d4eff36a51.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     3280
IP address blocks:        2607:64c0:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e4:d8:6c:21:49:cd:6c:d6:4d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=251c7408-1896-4d2b-aeec-e25633d1b3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:79:bb:ff:98:65:f8:61:6f:9a:cf:b3:a5:
                    24:76:e3:2b:7e:44:d9:1a:0e:c4:0e:b7:d3:39:0f:
                    64:87:ab:e5:3f:2b:ad:7b:77:e1:db:86:22:77:2b:
                    0b:aa:c1:00:48:09:ca:a1:0f:b5:92:dd:2f:fd:ea:
                    b5:3c:a7:df:75:69:3c:21:ca:0a:e8:ae:90:df:31:
                    e9:19:cf:84:ec:75:bd:d4:dc:44:73:36:3e:42:fe:
                    3a:32:09:3d:ea:54:14:ac:ca:f7:78:ea:69:2a:04:
                    3d:72:12:03:8d:d9:59:3f:e2:11:07:4c:de:5d:90:
                    27:70:a7:c6:c5:fc:6a:f5:66:4b:cf:a6:be:96:ff:
                    df:56:5c:c0:11:3f:99:6e:96:82:55:0f:02:d8:3a:
                    54:df:09:f3:bf:44:5c:0b:5b:44:94:76:a2:39:dd:
                    7f:99:7a:d2:f7:1b:bc:61:d9:37:97:d5:20:f4:a6:
                    50:93:57:c7:53:9d:60:0e:0e:c7:26:51:31:5b:44:
                    be:df:39:d7:de:03:68:7a:c6:92:14:b8:6a:cd:2f:
                    4c:dc:f2:7e:c0:e1:d9:f1:fd:07:8f:a9:73:94:fe:
                    54:bf:91:c8:4e:38:61:3e:63:88:41:2b:4c:c4:97:
                    e4:99:f6:f4:ad:23:ca:39:68:cf:d5:b9:ad:68:7d:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CD:F5:04:55:54:C6:33:0C:F6:24:3E:86:AB:C6:C4:6E:0C:C2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7876bf40-fef2-36ee-b5e5-13d4eff36a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:64c0:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:75:eb:5a:79:98:b7:f6:30:22:2b:d5:91:68:8c:d7:4e:f7:
         bc:c5:64:80:05:9e:93:fe:60:bd:1f:85:98:c5:ae:1a:ee:c1:
         4a:70:d8:58:61:2f:f6:f4:20:ed:c2:71:d0:9f:03:49:a2:67:
         36:da:1c:71:85:4a:6f:7a:78:49:e7:c4:b3:c2:5c:8c:54:d9:
         e4:6f:17:66:ae:88:cc:57:46:87:6b:c1:34:19:30:a4:b9:29:
         a5:19:1a:f8:08:11:38:e7:ec:87:01:35:79:6a:52:ac:c5:ad:
         1f:8c:10:5a:bf:45:92:d0:a9:58:4d:f6:39:d1:72:e8:b4:a8:
         bb:5b:b7:d0:9f:b4:d4:77:de:8e:4e:f0:bf:6e:71:3a:4e:f9:
         dc:dc:30:4f:ea:91:87:c7:ba:4b:3b:ca:c9:18:11:44:3a:eb:
         82:73:e3:82:c6:d1:8e:5c:ef:75:a0:f0:cc:36:c1:7d:c0:44:
         72:d2:98:73:9f:12:15:d8:c1:77:1e:6b:c6:27:43:6b:07:ec:
         a3:37:f8:d8:5c:35:28:65:0b:a0:dd:eb:b7:9c:ce:50:72:7b:
         80:3d:db:b9:63:c4:c0:44:90:e7:34:a2:68:15:7e:e5:fd:0b:
         19:10:5c:2e:19:ad:7a:3a:26:57:da:04:ae:86:83:98:91:cc:
         fd:69:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:35:13 2026 by rpki-client