Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa
File:                     8ca887e2-fee5-3544-b7d1-cab80697c43e.roa (raw, json)
Hash identifier:          aYW6LzfsvaMtlMjkXWXpkz65nvoNICPgbyq9BNbJs1k=
Subject key identifier:   8E:26:EF:D6:BD:A4:1C:F8:8B:6E:84:B5:5B:B3:84:05:41:78:5C:56
Certificate issuer:       /CN=39fea962-7ffb-4d29-beb1-e588e6436410
Certificate serial:       010D0C9F4328584E94EA4F2FBCC52717C55EFA80
Authority key identifier: C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     30247
IP address blocks:        2607:b80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4f:2f:bc:c5:27:17:c5:5e:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fea962-7ffb-4d29-beb1-e588e6436410
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=43d8d6c0-91d6-4340-8b26-508c81ead6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:d2:f3:26:f5:64:d1:9f:48:20:66:70:60:
                    a0:a5:68:e1:b3:fb:fb:ad:ae:63:b6:2f:79:ae:2b:
                    bf:6a:58:3f:49:6d:d1:36:5e:5f:05:4b:c9:0f:9d:
                    8b:4a:8f:83:e0:8d:04:05:d7:49:70:e1:6a:52:be:
                    d4:d7:c9:11:18:db:80:6e:83:86:b4:c5:37:e4:79:
                    9d:de:aa:0e:cd:b8:a8:33:23:88:f1:a1:57:a7:a5:
                    5b:ae:21:48:f0:52:59:6e:2f:4a:5b:69:29:cd:69:
                    e7:3d:d1:0e:71:04:aa:dd:6f:aa:11:42:bb:36:75:
                    e6:e9:a1:a7:55:c7:61:bf:3d:2a:87:6c:b9:29:c7:
                    66:32:33:2e:7d:dd:12:59:cd:6d:a8:d9:fc:79:bb:
                    29:90:8c:ad:ef:f5:e7:07:72:36:6e:d5:5c:e9:35:
                    c3:54:88:35:1e:cb:1f:44:9f:10:9a:b4:10:42:b9:
                    61:e5:38:17:56:9e:25:a8:67:45:b1:e1:f3:f4:d0:
                    5a:f7:47:e7:44:03:05:74:5d:29:0a:00:8f:10:27:
                    ab:1c:eb:d0:7c:9c:92:f6:84:43:f6:4a:5b:3c:40:
                    03:f1:71:86:04:19:bc:0b:12:c9:3b:f9:2a:31:35:
                    33:9d:5c:30:d2:f7:47:49:96:f7:37:de:8f:6f:2b:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:EF:D6:BD:A4:1C:F8:8B:6E:84:B5:5B:B3:84:05:41:78:5C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl

            X509v3 Authority Key Identifier:
                keyid:C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:8c:ab:a7:b8:4f:5d:e5:3f:1b:d0:56:6a:6e:fe:77:c8:
         5d:9a:d4:50:94:d5:b8:80:a1:eb:96:f3:cf:a9:7d:37:f4:07:
         fc:4f:79:51:8d:aa:5c:34:63:ce:39:37:2c:4d:8a:41:04:41:
         88:b8:74:2e:8d:c9:cf:3e:be:b2:18:62:0c:2f:6e:90:89:98:
         62:da:3b:f6:1f:37:d2:4a:b3:b9:c1:a9:ce:45:25:83:04:d9:
         4d:10:d9:be:28:ef:fc:da:84:d3:d1:cb:3b:cc:b4:a3:1a:35:
         ff:0a:a1:22:cc:f8:6c:6d:3f:d7:fb:21:51:3f:1d:82:7a:1a:
         18:44:02:df:66:ea:8f:9c:44:6b:83:69:d4:28:c3:44:41:41:
         66:11:86:84:e6:e7:9c:7e:ac:98:55:c1:c2:65:b2:49:84:1d:
         cd:e0:ae:75:31:11:c5:66:b4:c4:aa:b0:32:d3:ee:f3:2d:74:
         78:0f:8e:70:fe:4c:6e:9f:ed:49:84:24:6a:f2:68:b2:16:56:
         79:68:f3:1a:a7:3c:8b:3a:51:14:2c:c5:18:b0:24:60:94:ba:
         90:ec:c7:61:a7:15:ee:63:5b:d1:a7:00:b2:f9:3f:44:94:6d:
         5e:67:75:2c:77:75:cd:4d:61:f9:35:ee:dd:dd:6e:1f:f5:48:
         b0:b3:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:44 2026 by rpki-client