Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa
File:                     4d858919-717c-34a0-af03-e397e8e819f1.roa (raw, json)
Hash identifier:          AbqdsksmOvKFyIpjgrKQUU2h3J7ZjdEPBMz85GjR4jA=
Subject key identifier:   2B:EF:40:D1:F9:3A:5C:18:18:1B:B1:B5:A6:B3:1B:2D:F6:25:91:62
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F4328584EA79981D938D0258957F48F80
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2620:12c:8041::/48 maxlen: 48
                          2620:12c:8051::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:81:d9:38:d0:25:89:57:f4:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dc9edf4e-890d-43eb-9399-518f2836aea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:5e:cb:9c:91:6b:92:7c:94:b4:05:ac:53:
                    15:e3:13:e3:fc:37:87:cc:83:ac:9c:74:89:5f:cb:
                    06:c4:92:d1:15:9f:09:fd:07:ec:7f:f9:09:2e:12:
                    ea:3f:21:35:28:6b:d2:29:fa:47:1f:e7:fb:56:a7:
                    23:82:9b:b2:50:bd:9c:39:e3:f4:3e:5c:7c:0b:34:
                    78:85:87:0c:3a:eb:68:33:40:d2:38:e5:79:6d:6d:
                    13:3f:93:f4:95:99:c0:31:5d:fe:cb:1f:6a:63:fa:
                    1b:1b:46:0e:ba:d1:0e:db:1d:ef:32:95:19:a0:8e:
                    cf:ca:32:1b:56:7c:08:ce:0b:7f:b6:2e:08:42:65:
                    3c:5c:64:ce:ce:3d:50:6d:86:65:40:ad:b1:f5:be:
                    33:3a:e6:61:38:54:ae:75:f0:07:68:8d:4c:44:82:
                    99:9d:49:1b:54:0f:8a:0c:2b:a1:c0:33:7e:72:f8:
                    b9:79:bb:05:8f:b4:60:65:87:e8:1a:ff:59:c0:7d:
                    b0:15:c3:92:e1:03:66:f6:bb:f4:51:89:ee:2e:54:
                    8e:9a:9f:db:56:db:a0:59:ea:be:9d:c9:2d:2d:d7:
                    57:35:1c:2b:f3:f2:64:12:d9:ba:f0:30:fc:2d:0f:
                    ec:02:ad:ee:81:da:a5:52:70:32:bd:e4:22:40:23:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:40:D1:F9:3A:5C:18:18:1B:B1:B5:A6:B3:1B:2D:F6:25:91:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12c:8041::/48
                  2620:12c:8051::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:bb:f9:4a:25:ef:6e:45:9b:51:23:92:b4:9d:70:ab:e5:ae:
         bb:95:fc:6a:52:50:4e:8a:38:13:8c:14:b2:96:af:74:c1:e0:
         e7:38:c8:2c:2b:5e:bf:08:fa:ee:55:1e:9e:06:98:05:38:da:
         77:07:9e:13:9e:07:23:28:a1:56:96:34:a2:a6:5b:92:24:4e:
         be:19:1f:31:b3:b6:e9:24:46:3b:8e:56:6b:5b:3b:bd:fd:14:
         36:22:35:18:bf:11:9d:44:19:90:ab:09:3d:b3:79:a1:b7:1a:
         df:09:fa:81:7a:36:7e:2f:f2:0c:33:af:5c:00:3c:45:09:0d:
         c7:37:7d:e0:0b:64:04:39:a0:16:14:cd:1d:6e:df:94:62:3e:
         04:a3:4e:e1:3f:ae:8c:4b:5f:63:29:e4:39:aa:b0:00:35:e4:
         82:01:ef:dd:84:2c:bd:8f:e8:d1:03:35:8f:6b:6e:95:b1:f2:
         82:7e:25:d7:2c:e2:71:cd:af:46:9a:d2:a0:33:7b:b6:3b:44:
         53:79:92:a2:c5:06:93:e6:14:88:4f:60:92:f9:6c:b8:d1:44:
         9b:85:3b:bb:bb:d7:a5:82:a1:87:45:2c:b4:ec:f5:be:d3:17:
         c6:f8:24:e9:f5:c2:57:d2:b5:1b:50:96:b9:a6:3f:a0:82:b8:
         ba:5c:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:58 2026 by rpki-client