Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa
File:                     cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa (raw, json)
Hash identifier:          RrRc6VKczX8laxIUPrl2bXBfPX5cep6mNQ4M+oiaO88=
Subject key identifier:   F0:BA:EB:5B:59:0A:3C:4E:4E:FE:35:39:C9:E0:8C:BD:F9:6A:00:CE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EA44515821E57E27BAAA11D20
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     30058
IP address blocks:        2001:49f0:d13a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:15:82:1e:57:e2:7b:aa:a1:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=9cd745d4-9c67-447f-8ea5-c8ea2a810933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:d8:67:56:56:b0:be:7d:9f:3d:bc:16:29:
                    54:82:f6:37:e6:3d:50:b2:d6:f6:e5:5a:d3:f3:8c:
                    ff:ef:54:ae:94:5f:bd:9e:57:f3:3d:8f:ce:77:9d:
                    16:70:bf:df:61:00:20:5f:56:ce:7d:7d:07:95:c9:
                    78:79:10:a2:d0:35:af:1b:b4:6e:4f:a4:b1:93:4f:
                    f4:31:c9:0e:60:4b:00:2b:b6:b3:1f:cb:53:03:49:
                    fc:67:c1:d8:0d:9a:e9:e8:65:bf:b1:66:0b:ad:20:
                    48:7c:34:c5:92:c2:b2:66:e5:4c:96:93:0d:54:d6:
                    5d:98:cb:73:4c:06:4f:91:b0:f5:68:7c:93:78:ad:
                    8d:12:e7:75:d7:e2:18:45:a9:00:23:b6:74:4d:e0:
                    6a:97:5c:ff:ae:29:d8:66:ea:89:bd:09:c3:2f:64:
                    cc:2d:8e:66:85:fe:81:21:32:54:dd:d6:31:21:f7:
                    ea:8b:9b:1e:0d:66:46:19:a5:67:77:db:3a:37:70:
                    48:24:d8:7e:42:d2:0f:ed:fc:d4:85:d6:34:9a:e1:
                    9e:1c:79:3f:18:6c:d3:34:5e:47:cf:14:ab:a9:62:
                    14:4f:8a:85:64:b8:02:48:49:ca:65:aa:62:d0:0f:
                    e4:72:04:5a:54:62:46:e8:b2:08:ca:c8:76:4e:f9:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BA:EB:5B:59:0A:3C:4E:4E:FE:35:39:C9:E0:8C:BD:F9:6A:00:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cd6a0dce-34d3-3443-8f65-55c2d98a3d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d13a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f1:42:fc:0c:98:75:51:e5:87:db:1f:46:2f:60:60:ea:96:
         88:f9:3f:c9:fd:a5:73:af:05:ac:ab:0f:ff:91:35:67:ca:61:
         91:61:33:bc:6a:f5:61:16:54:82:18:67:d7:0e:70:45:5c:da:
         22:64:4a:70:41:60:5c:52:37:b4:79:66:bf:1b:80:9a:52:e1:
         08:ff:00:44:5e:9f:2d:23:b1:28:86:c8:e1:d2:73:2c:93:bb:
         14:fd:8e:8d:bc:71:cd:6a:e3:77:25:1b:8e:d6:d5:e7:af:76:
         62:3d:d2:ca:d6:d8:dc:0c:85:72:2e:b8:c9:ef:0c:a4:a8:a2:
         76:9f:2d:80:82:3c:68:ce:fd:90:4b:b8:87:5d:48:29:5e:bb:
         3d:41:f9:e3:65:dd:42:ab:9b:a8:57:ec:bd:2e:b4:b7:54:36:
         0c:6e:23:66:79:9b:1c:55:9a:de:ba:7c:01:68:ba:d5:e4:9a:
         54:1d:fc:87:a5:1c:1f:52:e8:c6:2b:2a:e3:c5:fe:5c:4f:6a:
         b5:32:84:d3:19:20:be:ea:97:f6:78:83:f1:fa:f4:ec:17:8b:
         a8:e8:62:ab:60:45:8d:89:72:58:48:ad:9d:fa:cf:88:48:23:
         fa:df:d8:fb:ee:89:15:c5:ab:cc:39:92:06:3b:37:1f:e0:19:
         42:31:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:32 2026 by rpki-client