Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa
File:                     bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa (raw, json)
Hash identifier:          9fdetKt9wkp6YTz3/Utorit/zuXuzlrlELUrHoz2z6Y=
Subject key identifier:   03:76:85:61:42:87:2B:9B:A7:58:BD:32:A8:4B:99:85:A2:B4:FE:7D
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584EA2DFB79C27A13C1A546339C0
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     64249
IP address blocks:        2001:4830:c900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:b7:9c:27:a1:3c:1a:54:63:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=14be60a8-9d4d-4f88-af16-9810ce9e18e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:93:d4:ed:f3:b2:73:c0:4b:0a:a9:4c:cd:
                    5e:fe:1d:8e:ab:2e:e4:6f:c2:11:8a:eb:92:81:0f:
                    1a:f1:c3:2c:88:54:d6:5a:b1:33:00:5e:b4:aa:3b:
                    49:33:4c:2e:dc:e9:76:71:69:35:18:65:ad:82:36:
                    b8:78:56:e7:01:62:d1:dc:6e:b4:ca:0f:dc:22:a7:
                    9a:ca:71:49:87:54:c4:7a:ba:1e:87:18:83:a9:ce:
                    f3:68:e5:23:a7:49:2d:e8:c6:7e:97:f6:cc:3e:1f:
                    40:af:8b:2d:67:8f:61:e6:64:3f:10:92:b6:0b:cc:
                    9a:13:d1:20:64:d9:db:b6:34:dd:c6:6b:b2:31:83:
                    00:d2:d0:11:cf:2e:3e:92:12:9a:08:08:0d:47:df:
                    d0:e8:2f:2d:ab:61:82:88:d0:26:ea:e7:9e:b5:9c:
                    24:b7:b2:c3:2a:9b:75:99:2f:44:d6:5c:45:54:7e:
                    b6:28:5b:05:43:51:b2:4a:79:28:ad:30:c2:0c:99:
                    0b:7c:7a:81:b7:fc:b9:22:77:ca:6f:51:3f:4f:1a:
                    01:c2:76:6c:81:04:38:c6:d0:1c:ff:b1:a4:20:b6:
                    32:ce:0c:48:a9:20:f4:d4:69:d9:75:bf:a6:f5:7b:
                    9a:d6:0d:3b:a1:36:f5:3c:3f:bd:65:27:57:fc:99:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:76:85:61:42:87:2B:9B:A7:58:BD:32:A8:4B:99:85:A2:B4:FE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:03:bf:f7:6d:08:6d:2a:44:73:f4:d4:f4:24:65:88:51:33:
         d0:dc:af:2b:36:34:81:be:67:ad:8f:e1:eb:03:00:94:96:0c:
         18:b2:ce:5b:f2:10:d1:ac:a7:12:b5:cf:0a:bc:69:cc:f1:cd:
         75:d3:c4:9e:a9:ed:8d:eb:b2:c9:92:bf:a5:81:de:cf:0e:e3:
         ac:7d:cb:e9:53:6b:b2:d0:e9:af:b4:a4:f6:fb:d1:39:69:6d:
         0a:df:e7:3c:6b:a5:96:f3:3c:f9:bc:78:9e:cd:66:65:68:78:
         99:98:da:51:c0:56:1d:bb:c1:26:52:e0:0b:43:cb:b1:df:4f:
         01:b8:0d:01:0e:cf:59:6e:a7:7a:6d:8d:d6:52:c7:1d:7f:bf:
         41:26:69:f8:0b:0c:17:ff:20:cf:a5:c0:04:6f:58:1b:65:e1:
         6c:76:e0:db:89:d5:1b:55:2b:b4:cc:72:d5:8a:a9:2b:ba:fd:
         92:78:b8:c9:fd:81:e4:1a:96:50:d3:80:67:34:3c:33:65:f5:
         91:7c:47:6d:67:dc:98:0f:59:f7:80:f6:67:e8:23:7c:8d:29:
         c5:ea:ff:5c:dd:de:8a:2e:fa:62:bd:3c:aa:d1:4f:fb:e4:ab:
         d2:51:a0:74:a8:e1:19:3d:6d:fa:4b:79:66:58:5b:b6:58:73:
         39:70:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:53 2026 by rpki-client