Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa
File:                     b5d1b190-f53f-3f48-af49-06cea36826aa.roa (raw, json)
Hash identifier:          LppIfViBQEM6gwvKxf+NpKv9C3Wh31mMYXc6DGtdlQs=
Subject key identifier:   2A:D0:64:79:E7:04:E5:03:10:DE:E1:B0:C0:30:56:A1:71:24:05:47
Certificate issuer:       /CN=3db33a74-4bfb-4717-906c-95b172456bd9
Certificate serial:       010D0C9F4328584EA79A3529418E6978AB416100
Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401671
IP address blocks:        2604:c20:56::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:35:29:41:8e:69:78:ab:41:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f09097e7-6a95-4eac-b714-2f7e0ad1662b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:cb:d2:f0:e5:17:30:95:bf:e9:f3:3c:3e:
                    50:2a:f8:ed:3d:24:51:cd:5f:54:c6:d1:40:0c:f2:
                    ff:44:b5:2f:4e:61:a3:ef:dd:ac:ab:69:10:90:16:
                    ce:f1:87:1f:ca:a8:a3:2e:3d:a9:a5:de:ba:ef:c1:
                    1f:39:fa:71:56:5d:f0:60:d2:39:69:5c:e4:64:23:
                    bb:c0:3d:a4:2e:c9:a6:77:d4:f8:cb:99:cb:f3:b2:
                    88:37:ac:d7:bd:da:46:7e:1c:bf:a5:75:35:56:da:
                    fb:94:72:85:39:d7:05:68:a7:c4:16:b3:84:d8:32:
                    5a:11:07:b6:1d:98:0a:83:60:36:ac:a6:6e:3f:10:
                    46:80:46:ce:75:fd:61:07:1a:54:8c:81:17:f0:4b:
                    23:8e:15:5b:e6:73:66:9d:42:c7:d2:0d:20:2f:bd:
                    27:a3:14:37:ed:d5:70:29:18:7e:d1:4e:cd:ae:84:
                    bb:7d:32:c2:b4:85:54:1f:75:3e:b8:2b:fc:eb:66:
                    ae:c4:1e:5f:3d:bd:bc:d0:26:3b:12:bb:ad:97:41:
                    c6:e8:0a:5f:b4:2f:ec:7b:36:3f:0a:cb:7e:53:d0:
                    b0:eb:76:03:f9:e8:b6:09:e5:24:48:ab:69:05:50:
                    5a:35:8d:bb:81:bb:c1:8d:0b:fd:c5:fc:d4:c2:79:
                    73:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D0:64:79:E7:04:E5:03:10:DE:E1:B0:C0:30:56:A1:71:24:05:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl

            X509v3 Authority Key Identifier:
                keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c20:56::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:40:00:f2:5a:e5:ae:00:b4:93:9e:f0:c8:bc:02:ce:0f:03:
         8d:6c:fc:9f:61:ca:de:a2:3c:e8:0a:85:d3:8d:fa:fc:ab:6d:
         b2:49:f7:6d:3b:40:a8:61:ec:aa:ed:28:b4:80:15:4c:36:c9:
         fd:38:d3:e0:00:be:9f:00:91:e2:ee:d6:12:fb:ae:96:b2:1b:
         d6:53:84:0b:fe:8b:af:64:32:82:64:c2:92:89:cf:dc:75:d8:
         b7:37:d2:c1:d1:56:42:f7:13:74:6d:93:e0:d0:c8:df:86:fd:
         cc:c0:37:87:1c:9f:c9:8d:c2:49:5f:8b:bb:31:66:d6:57:74:
         01:ec:fe:71:1a:01:4f:fe:b4:3e:8b:5b:27:8f:30:3f:f6:ab:
         dc:e1:2c:be:7c:d9:1b:13:6a:69:d0:af:45:b1:45:d4:a0:a7:
         5c:77:10:d7:14:ea:e1:46:83:5c:c8:b7:0e:23:a8:4a:eb:64:
         c8:13:7c:d8:86:dd:b7:78:36:63:5e:cc:56:b4:66:d5:f1:c4:
         07:6e:e4:02:98:bd:e5:d2:67:bc:45:a5:56:f3:53:87:35:68:
         67:fd:a1:c4:77:08:9d:5e:bb:f8:63:e7:94:cc:78:a3:45:cd:
         16:b4:3a:6d:94:b9:ba:00:6f:ea:46:9a:6c:cb:da:3e:da:83:
         94:9a:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:13 2026 by rpki-client