Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ba6698fe-2d98-3229-8b0b-25cec32913bf.roa
File:                     ba6698fe-2d98-3229-8b0b-25cec32913bf.roa (raw, json)
Hash identifier:          sO6SKDBZnAmVmKI2dXtwhhYadvVlbj67DPrcuApZ6nI=
Subject key identifier:   05:18:EC:29:F1:8B:52:3D:C1:08:EE:A2:D2:BB:FF:CC:53:1E:35:93
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584EA786E95385F4698994143530
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ba6698fe-2d98-3229-8b0b-25cec32913bf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396055
IP address blocks:        2604:fcc0:9000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e9:53:85:f4:69:89:94:14:35:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=21009e42-933e-49e5-8e8c-405d8fc9143e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:f2:97:da:fc:98:9c:1f:f6:d2:b4:83:b3:
                    c7:6b:7b:14:f4:e4:3b:d6:eb:fe:2f:5e:51:1d:b4:
                    1f:45:38:c1:2d:30:34:5d:fb:f6:66:8a:da:49:e6:
                    da:41:d3:96:4f:3c:0a:76:95:03:95:a9:e9:37:2b:
                    ed:23:8b:d7:6c:2b:12:45:e1:6b:d5:cb:71:15:47:
                    5f:eb:6b:4a:a0:49:6c:5f:db:8a:e8:27:5f:0d:63:
                    96:23:12:b0:d6:90:a2:03:84:f5:c9:39:8c:37:95:
                    19:8b:dc:78:cb:bd:da:65:f3:4b:89:12:9a:97:7f:
                    0d:51:b0:e6:43:d9:39:24:6e:2d:ec:8c:f4:02:20:
                    94:90:c1:f4:f2:13:d3:e6:7a:f5:9a:1d:cd:8b:42:
                    e1:cc:4f:f2:35:36:64:d2:04:da:32:96:66:08:e4:
                    bb:d5:05:d5:a3:d7:5f:0c:1c:55:7f:ca:25:5f:5b:
                    da:04:61:86:81:e6:0d:ad:ce:21:65:4e:34:ef:f9:
                    33:f1:4d:98:48:93:42:cf:95:6e:f1:2d:79:15:a6:
                    68:19:8e:d8:57:ca:6f:c1:30:fc:60:d8:0a:0f:ae:
                    03:40:9d:a0:8b:a3:36:08:3f:80:ff:92:9e:4d:12:
                    b6:90:56:e2:ff:eb:d0:18:a7:05:8c:f1:9f:d7:8c:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:18:EC:29:F1:8B:52:3D:C1:08:EE:A2:D2:BB:FF:CC:53:1E:35:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ba6698fe-2d98-3229-8b0b-25cec32913bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fcc0:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b8:4f:1e:78:cc:ec:d8:55:75:18:4e:4d:48:21:ec:ef:58:
         e2:67:f1:a0:e5:89:bb:2e:24:75:20:80:fc:18:94:0f:02:25:
         67:86:77:1c:ed:72:db:17:ee:e9:cf:82:18:3b:c3:e0:a7:20:
         6d:5d:cc:97:b0:a5:a8:0c:3c:6e:b9:7e:90:52:c0:8a:c5:5d:
         4c:98:51:08:2e:30:a5:09:56:03:86:64:bc:30:a9:b8:f1:4c:
         45:15:72:39:c0:05:1a:00:4b:45:26:09:7f:49:e6:80:36:3e:
         29:4b:ef:d3:82:85:e6:de:f1:88:78:e4:bc:70:26:2a:a1:a7:
         e0:a7:b2:24:40:e0:88:bc:0a:3e:81:51:c9:87:47:0c:ff:94:
         8b:d1:9b:03:af:1b:6c:09:c7:91:11:68:3e:42:a4:5c:b3:99:
         03:9a:ee:1b:1f:42:28:80:7b:d5:ce:5e:18:66:43:c0:04:d7:
         df:fa:b6:1f:49:ed:71:72:ce:9f:23:02:f4:1e:8d:48:44:78:
         74:45:74:b1:c3:86:18:ce:06:93:8b:9f:0a:7a:c0:78:18:e9:
         90:a0:b9:00:86:67:a9:2f:f0:04:b1:a0:66:7b:5c:91:15:38:
         cc:b6:07:70:84:fa:4b:92:3e:0b:3d:dd:e1:73:61:8e:8e:3a:
         98:7a:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:54 2026 by rpki-client