Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a7c4b3e6-bd0a-30b6-96c2-94dad78ccb47.roa
File:                     a7c4b3e6-bd0a-30b6-96c2-94dad78ccb47.roa (raw, json)
Hash identifier:          VLkyb/Xd1QmkZVdQB2c2OTAOmO8KmodpPq6CCOrTY1Y=
Subject key identifier:   8A:4B:08:17:42:17:E5:95:91:16:A1:A2:B9:8B:93:31:AB:BF:C4:44
Certificate issuer:       /CN=03e58790-8887-4eae-9965-80e3a70bdf97
Certificate serial:       010D0C9F4328584EA787CE01910C25C115571760
Authority key identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a7c4b3e6-bd0a-30b6-96c2-94dad78ccb47.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46293
IP address blocks:        2604:1840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ce:01:91:0c:25:c1:15:57:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e58790-8887-4eae-9965-80e3a70bdf97
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ae80faf6-db9a-4443-a2d0-25e0a7732aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:97:7e:a6:75:db:77:80:1d:d0:9e:99:0a:
                    2f:38:6f:20:da:0c:78:80:e2:0c:0f:f0:ea:c3:cb:
                    1e:d5:c3:79:ac:b9:d2:bb:35:b7:10:78:e4:be:d5:
                    bc:8c:6a:40:7c:9a:c0:53:9d:ef:42:9e:cf:a9:27:
                    9d:20:d6:f7:92:4e:e0:8c:c8:0a:0e:c1:ed:93:85:
                    6c:72:99:2d:e1:3a:5a:28:0b:7e:93:1a:84:84:6d:
                    b3:5c:a7:e7:84:9b:64:de:c4:2b:f6:ad:c1:fb:34:
                    d8:5a:82:23:a7:37:3e:d4:02:af:af:62:92:72:80:
                    28:66:10:72:73:9b:9a:00:f9:76:fe:d0:df:24:89:
                    57:af:68:e0:14:8a:58:61:0a:2d:c0:a7:99:ed:b2:
                    0f:cf:68:e3:c9:84:7b:6e:e6:06:2d:0a:ae:ca:fe:
                    58:24:5c:bf:2f:79:ed:ae:57:1e:5c:5c:6a:3c:10:
                    c0:9c:1d:d6:95:ff:be:67:4f:2c:c8:5e:65:c9:ca:
                    e8:ec:f4:a0:d3:df:59:92:cc:52:ed:66:39:8a:c5:
                    74:94:58:d0:a8:30:51:17:99:5d:77:3e:ec:41:dc:
                    f7:10:64:a3:8e:5d:fc:44:87:e0:49:aa:b5:87:8c:
                    64:ac:bc:a7:e9:1e:30:0d:71:ff:29:b7:31:c1:41:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4B:08:17:42:17:E5:95:91:16:A1:A2:B9:8B:93:31:AB:BF:C4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a7c4b3e6-bd0a-30b6-96c2-94dad78ccb47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl

            X509v3 Authority Key Identifier:
                keyid:53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8b:3d:73:7b:f6:2a:8b:4a:18:d9:0e:f9:3e:5b:5f:c0:19:
         bf:60:be:30:1e:83:42:18:de:21:ee:6f:ed:80:8b:bc:3b:e3:
         46:26:3b:17:fd:bf:4a:a3:1f:8a:b4:2d:fb:bd:90:17:b1:a9:
         6d:ac:9e:52:73:72:ba:f7:86:c6:70:db:56:a8:18:38:62:8d:
         bc:f4:0a:c3:63:bd:4a:0e:ee:30:c4:e5:20:1b:34:29:41:1b:
         c5:9d:15:86:b3:5d:04:11:7f:e2:59:6b:0f:b2:57:3a:1b:dd:
         08:68:7e:f0:a7:f6:19:73:39:bc:b5:0f:4e:53:41:23:d8:03:
         cc:17:0d:0d:15:d7:4d:ac:a2:db:e6:3b:60:3c:b1:c8:ef:a8:
         53:a1:61:9a:eb:02:f9:04:19:0e:8b:f4:03:f4:9b:c1:6e:fe:
         74:e7:6f:be:56:b9:3c:6b:ec:d7:fe:69:68:ef:e8:a3:c6:9d:
         f5:c2:af:4e:01:9a:cd:ec:f0:f6:7e:92:04:48:2c:09:2b:90:
         d2:f0:c6:f3:5c:6e:67:a8:b2:ae:b0:2d:c8:74:f3:3c:4f:c9:
         0e:db:01:5d:44:ac:9c:59:57:a7:d8:20:85:39:b8:00:5f:aa:
         c2:24:a3:85:e4:97:56:6e:65:9d:80:24:98:0f:55:59:2b:39:
         e0:3a:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:12:24 2026 by rpki-client