Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa
File:                     1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa (raw, json)
Hash identifier:          Nj1JyUmEvmlB2zc4Lnfo23Uc7AkBL+JwQpK66CkuMYw=
Subject key identifier:   9D:5C:5B:C1:DB:9F:3F:B4:5C:C2:0E:02:43:6D:C1:CA:B2:48:5D:2F
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F4328584E9D4A73AD6008693668F3C700
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        2620:c1:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:73:ad:60:08:69:36:68:f3:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=756535da-02c5-4a15-8498-a6c533291427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:24:01:35:73:0e:b8:b1:41:18:74:a5:d0:
                    17:57:27:f0:70:a7:bb:78:b5:49:ce:7a:1e:e0:8f:
                    68:02:00:ca:82:5c:5f:01:b5:2a:69:a1:d1:da:6e:
                    5b:88:e4:ae:2d:2f:9c:b1:63:48:7f:ae:2c:eb:cf:
                    b7:43:aa:0a:d5:fe:37:cd:8f:4d:e7:df:4d:cb:47:
                    07:59:be:98:07:c9:8c:9e:69:e9:1e:55:43:94:6f:
                    a3:2a:2e:44:2a:cf:07:b8:f9:d6:6c:65:29:72:c7:
                    3b:6f:82:36:08:e3:de:df:fd:b9:c6:46:21:ee:1c:
                    ee:5c:81:ca:92:5f:84:0f:de:7c:42:c8:d7:27:5f:
                    de:11:4e:2f:ce:38:0d:2b:d2:cc:f5:b2:e7:c7:18:
                    a7:0f:d9:73:52:b5:49:33:1f:de:f9:63:fb:7b:a9:
                    8a:48:bc:49:70:43:31:d3:f3:c8:e0:a5:c7:fe:c1:
                    8c:da:ab:e6:84:4d:21:54:67:c1:55:08:8a:50:fa:
                    85:7f:ac:ca:71:77:fb:18:1c:07:82:43:e0:da:9a:
                    5f:7e:36:8e:f5:47:ed:49:ee:c4:ed:e8:d0:23:7d:
                    0d:55:7d:dc:90:09:cc:41:c0:cd:0c:ca:f5:e1:fa:
                    0e:1c:1d:a3:3d:28:df:00:05:79:31:43:2c:40:5c:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:5B:C1:DB:9F:3F:B4:5C:C2:0E:02:43:6D:C1:CA:B2:48:5D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c1:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:0b:52:19:50:59:af:79:3c:e1:47:80:66:78:c5:d6:87:
         63:2e:a0:9e:ca:4c:df:9b:ca:28:07:d3:ab:c1:f9:2c:37:34:
         80:e4:2f:a6:0a:2e:e5:4c:fb:8f:49:21:82:93:d9:4e:4f:8f:
         0c:b3:7c:eb:e7:c9:51:81:8c:13:d0:24:5a:cb:a8:04:75:a9:
         b8:3d:a3:53:39:81:78:24:77:a6:f7:8f:5d:ee:93:83:bc:99:
         d3:25:81:0a:53:51:19:00:6f:4e:ea:67:83:65:d8:1f:8b:3a:
         9e:ff:77:76:6c:4c:c4:8e:aa:3e:19:22:cb:f5:9b:bb:d8:80:
         36:25:b4:39:81:40:b2:f7:03:9d:8b:f4:d1:d2:47:9b:82:b0:
         70:70:b9:d5:75:fc:cc:eb:eb:33:53:80:fb:58:b7:88:08:85:
         c7:06:82:47:28:9a:06:59:a0:99:a3:c1:a1:be:fd:b9:1c:5b:
         18:23:b8:04:48:24:7b:26:59:ff:26:81:30:ff:44:b3:58:92:
         5e:ff:08:9b:08:03:c9:40:f1:1f:4f:aa:06:db:85:e1:eb:98:
         f9:fe:ad:bc:19:13:19:e4:b1:04:5d:da:0c:b1:86:aa:51:74:
         17:e1:74:94:06:d5:21:d1:4e:ec:2f:73:f4:21:8b:0e:a0:49:
         13:9e:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:38 2026 by rpki-client