Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4c2b32f-cd6e-31e1-b787-3155ac4df6cc.roa
File:                     b4c2b32f-cd6e-31e1-b787-3155ac4df6cc.roa (raw, json)
Hash identifier:          puAkLZ/3sMLokyGCKtdllW3O8WApbM5oCJzVhMDomGI=
Subject key identifier:   FE:43:F5:3F:57:B0:A3:93:18:5A:94:D4:C6:3A:2E:7F:3C:F3:CA:0A
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584EA79145F8902C664E541BC480
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4c2b32f-cd6e-31e1-b787-3155ac4df6cc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff45::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:45:f8:90:2c:66:4e:54:1b:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0a8ab033-5672-4d06-9378-517dd4846193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:29:ef:d0:7e:b2:a6:ef:8f:48:49:f9:22:
                    a0:91:8c:41:3e:bc:ce:7d:f7:26:b8:e6:3c:aa:6b:
                    39:7d:ac:07:6b:7f:d2:21:6e:0e:cb:b4:4f:50:81:
                    57:80:ba:55:ec:90:27:40:1c:e5:89:c3:86:05:17:
                    dc:c9:ca:7e:1e:7d:24:01:ad:b4:3e:d6:ee:25:f6:
                    73:4d:d7:42:7e:37:9f:b3:f4:90:14:dc:1d:35:18:
                    36:81:77:58:23:a3:28:96:6a:d5:17:73:b6:7b:de:
                    43:62:93:97:df:f8:1f:0d:78:8e:ec:1f:54:32:45:
                    0c:61:39:5f:11:13:39:48:62:89:b2:9f:cb:cb:0a:
                    e1:b0:48:2a:84:ac:7e:20:2d:ec:61:1a:b5:1d:d6:
                    4c:0f:ef:c1:21:10:45:54:4e:5d:28:00:2a:7d:9b:
                    4a:ed:37:17:27:ec:4d:db:f0:21:3c:4b:71:dc:dc:
                    3c:79:fc:45:23:e0:27:ce:7a:62:4b:76:0e:a9:b9:
                    45:24:70:6d:90:f8:2a:f7:b1:8d:2d:80:a1:c5:36:
                    f5:cb:eb:35:be:a1:c6:02:fd:03:35:a5:dc:54:c1:
                    f0:9b:5e:32:26:45:14:a1:b0:43:c9:03:92:15:e7:
                    ed:29:ac:38:af:c6:fe:f6:da:d1:bb:d4:2b:19:8a:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:43:F5:3F:57:B0:A3:93:18:5A:94:D4:C6:3A:2E:7F:3C:F3:CA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4c2b32f-cd6e-31e1-b787-3155ac4df6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff45::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:15:62:e3:96:a5:cc:17:7e:ed:17:e8:84:cf:b2:06:e7:98:
         44:75:52:2a:26:15:5d:35:00:86:27:e2:47:b2:4f:cd:fe:1d:
         8a:04:3a:9d:1e:f3:ed:66:6b:3d:d3:67:ad:00:a6:3d:02:d8:
         f2:4e:a4:5d:32:aa:85:20:e5:e6:bb:fc:8e:4a:37:cd:89:07:
         d2:bb:1b:ab:a9:c3:41:02:03:a4:c8:bf:df:c9:f8:a2:f8:67:
         78:7a:e2:c3:02:90:b2:f6:b6:50:ea:a5:53:9a:4a:a3:52:b4:
         20:6a:ec:f9:23:32:16:60:e2:a1:5e:fc:0c:32:aa:ab:9d:a0:
         81:f0:17:b6:6f:69:4a:6e:31:7c:74:ee:07:4d:89:52:75:a9:
         b5:48:45:ad:d6:71:3b:33:e2:31:5d:df:c7:d2:a2:fb:43:85:
         28:af:4d:eb:fd:fd:29:c2:27:5a:d2:80:47:8a:9c:db:c9:9c:
         f6:04:da:46:c5:b5:53:d1:e0:a6:22:92:d3:78:92:2f:84:b7:
         2b:8d:06:e0:1f:c7:ce:02:0d:86:26:c1:3d:ab:c7:e0:c7:30:
         eb:3d:7c:3f:4b:45:20:95:38:d2:5c:b7:d0:7e:9a:1f:64:82:
         f5:bc:92:7b:f0:da:90:88:31:19:c7:cd:8e:96:a8:73:0f:34:
         7f:55:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:38 2026 by rpki-client