Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1bc1f0df-9603-3133-a795-1262552821fd.roa
File:                     1bc1f0df-9603-3133-a795-1262552821fd.roa (raw, json)
Hash identifier:          P3yUW8NLGPbZWxkgrC24BoYKhU6XssYzAmcs8rLluiA=
Subject key identifier:   B0:DC:B3:B3:5B:B8:65:D5:6C:AF:A4:F1:DE:D5:32:18:7A:B3:F9:C4
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584EA7971CB460D92B5B08B56880
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1bc1f0df-9603-3133-a795-1262552821fd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff47::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:1c:b4:60:d9:2b:5b:08:b5:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d880d949-288a-4d10-a56e-879abfbc3f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:94:aa:8f:3e:a1:b3:d2:9b:80:3c:3b:e3:
                    36:ac:f9:2e:38:5e:df:2e:82:8a:82:1c:d0:5d:ad:
                    6a:03:e5:e4:53:b8:f7:8b:23:63:4f:2d:4a:2d:c7:
                    25:dd:f8:44:52:13:7e:56:09:a2:d6:f2:a9:d2:8f:
                    66:70:b7:56:67:ee:f0:96:9d:ea:f1:d6:1d:21:02:
                    cf:7b:57:f1:20:fe:3b:db:06:14:d6:74:78:19:88:
                    a3:7c:b1:f8:10:be:f7:b0:15:9a:eb:9d:8c:06:db:
                    b5:a1:06:83:cc:8c:04:fb:22:9b:a7:fc:3d:60:1e:
                    8c:69:ba:1b:e7:41:ef:b8:81:07:5a:9e:a2:db:b5:
                    34:68:08:9f:54:53:1c:5b:2a:01:96:ab:84:cb:01:
                    98:07:84:6e:16:1d:c7:03:ac:6b:de:56:f9:7e:17:
                    2a:b0:c5:ed:79:d3:6f:0e:74:dd:05:a0:a2:d6:13:
                    78:9f:46:16:12:69:96:b6:e5:e9:f9:3a:89:20:79:
                    e9:88:e7:f3:b1:c6:14:c1:cb:a7:30:dc:d0:3d:7d:
                    75:2c:0e:82:d3:15:6a:f9:8b:35:be:2c:6e:67:c3:
                    05:a0:c9:70:28:45:2f:f3:22:90:c0:76:6e:36:ed:
                    cd:05:f7:ce:2b:d6:60:b0:ec:79:76:d3:66:aa:d6:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:B3:B3:5B:B8:65:D5:6C:AF:A4:F1:DE:D5:32:18:7A:B3:F9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1bc1f0df-9603-3133-a795-1262552821fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ae:66:58:26:5e:b9:33:9e:c2:0a:7c:0b:e8:c7:7b:f7:67:
         62:b6:42:94:a1:1a:ab:f7:14:09:d7:e1:ee:34:07:4b:f1:ab:
         d6:13:d3:73:8e:bf:25:8e:74:78:43:ce:7e:25:19:b8:cf:99:
         e1:2f:1b:b3:04:07:91:9d:7d:17:f5:87:bb:be:78:9f:2a:e3:
         a9:a0:f8:88:1a:83:77:a8:41:fd:95:d3:19:8b:0a:09:bc:0a:
         e5:9c:5e:e1:3d:b5:bb:80:98:89:74:db:ec:70:6a:57:66:e7:
         e5:80:bf:e5:b5:c2:ee:c6:21:1d:3a:3c:b5:87:8b:10:07:01:
         3c:ff:0f:27:8d:d3:22:ef:db:3b:15:5b:d9:c1:41:32:56:e9:
         39:b5:37:6d:56:ea:ba:4d:9e:33:42:0e:0d:8f:17:47:96:21:
         80:70:c3:d0:42:bd:08:aa:47:72:d8:96:1b:95:a0:7e:ed:2c:
         bb:73:eb:6e:93:24:bb:45:79:53:d6:68:f5:82:87:42:25:7c:
         32:75:e7:ea:60:e7:4c:7a:25:7d:8d:76:85:1d:d7:c6:48:61:
         18:91:85:d4:91:d5:0d:84:76:15:e8:f5:4c:15:cd:ed:1a:9d:
         bc:64:18:9d:93:dc:29:99:c9:67:0b:62:d7:2b:65:ac:d0:62:
         53:2a:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:34:51 2026 by rpki-client