Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/ebd1f481-b63a-3de0-80dc-690d2a04801d.roa
File:                     ebd1f481-b63a-3de0-80dc-690d2a04801d.roa (raw, json)
Hash identifier:          rUzcDioxm1G46AJx7w1Lrj4ZN1qbAgTy+W28yKxohpY=
Subject key identifier:   EE:88:0B:DF:82:DD:92:84:C6:37:4C:DA:34:C9:35:3A:76:AF:AB:3D
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584EA5AA7272043C45610B1FE600
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/ebd1f481-b63a-3de0-80dc-690d2a04801d.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     25664
IP address blocks:        2607:cc80:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:72:72:04:3c:45:61:0b:1f:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=c4ed39bf-adef-466e-84a8-96df595c573d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:a0:62:43:16:08:9d:a8:b0:77:16:e0:c2:
                    d3:9e:78:f7:73:b9:94:4c:a3:c4:7e:59:75:91:7d:
                    96:b0:84:82:7f:67:b4:7f:ba:31:99:70:b9:b5:98:
                    1d:07:de:3b:4a:0f:15:11:59:96:ab:7f:d6:a7:7e:
                    b6:ea:35:ac:b9:c4:12:d7:b7:15:b1:56:23:b6:17:
                    d1:21:e5:c1:c0:46:86:e2:08:70:69:8f:a4:c9:c0:
                    a4:69:b4:18:b2:a9:04:d0:39:ae:d8:4b:5a:30:49:
                    9f:f6:68:4c:b8:df:b8:fc:58:a6:f3:26:18:3e:04:
                    a7:d6:3d:c9:1a:11:30:54:fc:9a:9c:35:70:72:7e:
                    e9:99:39:7d:49:84:7e:82:94:43:50:f6:55:df:d2:
                    eb:6e:13:e5:55:c4:b0:5a:0a:20:ee:57:24:54:51:
                    1b:87:d0:34:47:81:86:42:b4:ec:d0:7b:0b:b1:00:
                    04:7d:78:c6:7c:c5:17:da:ea:7b:73:6c:a1:0d:f3:
                    6d:fa:b1:0c:8d:a1:c4:6d:96:77:b8:fd:ca:9e:45:
                    d4:52:83:3f:f8:2a:ca:a0:52:fa:84:65:ac:29:f4:
                    65:ac:31:1f:79:f1:6f:8e:62:73:9d:b0:aa:56:5a:
                    e1:30:2b:6d:2a:59:46:13:7f:90:5f:86:b6:95:5f:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:88:0B:DF:82:DD:92:84:C6:37:4C:DA:34:C9:35:3A:76:AF:AB:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/ebd1f481-b63a-3de0-80dc-690d2a04801d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:0e:a7:a7:4c:08:d0:6f:71:4c:5f:1a:b9:50:e6:b7:3b:
         61:d4:dd:c7:0f:7f:1c:c0:eb:0d:af:e9:df:ab:fd:f4:1c:42:
         ab:c0:bc:77:83:29:09:50:2f:3c:51:72:58:76:37:b9:ec:4a:
         f3:65:e5:bd:c1:88:f0:85:ee:ad:d7:c5:50:5a:8b:60:64:88:
         0f:42:e5:16:b7:48:7d:46:bb:51:53:14:a1:fb:a8:23:33:36:
         c8:95:96:cc:cc:0c:58:5e:3d:f7:3f:41:30:8f:0f:af:cc:9e:
         c5:63:a3:08:a0:59:56:35:2c:00:06:94:78:16:23:fe:2b:b2:
         c1:41:85:0b:59:a8:73:1f:33:f9:ad:55:45:e5:c3:ad:ee:52:
         80:96:db:94:59:ae:3a:a3:9b:0a:84:64:0b:4d:a3:d0:22:42:
         81:0e:c4:11:cd:f1:8f:5c:e0:0b:58:92:0a:50:23:48:b4:f5:
         9e:e1:49:ae:60:90:24:f4:6c:90:f8:32:d4:59:97:65:6f:f7:
         c0:02:bd:ad:3c:6b:ee:ae:bb:d7:42:ae:57:fa:e0:06:42:bc:
         63:7f:50:b1:c7:d7:b8:21:25:4c:8a:3f:70:ef:2f:18:be:0b:
         b3:50:bc:86:9a:03:6a:86:c2:2a:93:6c:a6:df:19:f8:f0:26:
         53:2c:5e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:46 2026 by rpki-client