Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/506513f9-2c86-3a5e-a9df-eba8bab7324e.roa
File:                     506513f9-2c86-3a5e-a9df-eba8bab7324e.roa (raw, json)
Hash identifier:          R4b40cuAVfjnfqBzP4VTDJ+bZtr1pGSF9alEmPamFZ8=
Subject key identifier:   15:FC:2D:A6:9E:CA:D8:B2:44:CF:2A:00:8D:2B:B8:FF:A3:4C:57:92
Certificate issuer:       /CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6
Certificate serial:       010D0C9F4328584E7634D05625C6EF99E3A9D480
Authority key identifier: 0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/506513f9-2c86-3a5e-a9df-eba8bab7324e.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     400659
IP address blocks:        2620:aa:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d0:56:25:c6:ef:99:e3:a9:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=db979af2-3b15-4f4c-b24b-169596fb4b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:9c:0a:a7:09:25:2a:63:52:f7:d9:a1:79:
                    96:0c:13:4d:e0:ac:fc:89:a9:63:30:37:a1:ad:67:
                    a7:de:1b:49:46:f9:a7:8d:a7:d9:55:70:97:69:77:
                    9e:4a:66:0f:9d:af:33:b9:94:af:c1:ca:91:8e:b9:
                    02:1e:57:52:df:b1:ec:00:b6:8a:69:dc:1f:9c:af:
                    9a:da:41:99:fe:b1:2c:a5:4d:93:81:1a:cd:e7:70:
                    47:67:21:39:45:09:4b:12:98:fc:14:7b:75:23:a6:
                    b4:da:30:67:0d:29:b0:72:1f:be:b3:6e:1a:51:1f:
                    6f:44:f1:64:54:81:bb:b5:96:b8:7b:2f:bb:90:bf:
                    2f:ad:cd:16:6d:ea:89:4e:81:82:b1:8c:4f:1c:5c:
                    3a:c6:df:2b:81:0e:bd:fd:f7:2d:90:bc:79:bb:cc:
                    cf:3f:1e:99:e0:90:6b:9f:a3:ae:68:15:05:af:47:
                    86:3e:ab:1e:51:b0:72:6c:65:59:e7:5b:bb:40:5e:
                    47:30:6e:eb:cc:ac:0f:c9:b2:77:c9:bb:b9:f5:f9:
                    e4:92:80:c6:d6:0f:77:cf:31:61:c8:e8:89:3f:48:
                    e7:d3:c0:49:d2:2e:fb:67:b2:76:37:09:83:14:0b:
                    61:ab:16:ce:37:28:08:89:7a:8b:51:56:0f:fb:0d:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FC:2D:A6:9E:CA:D8:B2:44:CF:2A:00:8D:2B:B8:FF:A3:4C:57:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/506513f9-2c86-3a5e-a9df-eba8bab7324e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl

            X509v3 Authority Key Identifier:
                keyid:0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:aa:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:93:57:1b:8c:f6:ce:7e:7c:e5:99:a1:df:3f:9d:c2:6a:d7:
         2d:8f:9e:9d:d1:2e:fc:43:f3:01:74:b9:0a:6a:aa:78:9e:22:
         41:33:f4:7e:5a:6b:65:ea:ce:f6:b9:33:82:5e:85:92:82:8f:
         35:8d:ba:e1:f2:27:b2:c0:b3:d1:84:5f:a2:29:ec:92:4e:a0:
         f0:ea:96:e2:37:8c:eb:5d:cc:27:4f:0f:8a:09:bb:a1:00:46:
         b3:46:e1:fe:6b:da:ac:36:2b:a3:74:bc:7a:58:6d:23:c5:a3:
         8a:73:22:3e:c1:db:28:da:63:0b:7b:ac:b9:68:a1:34:a7:54:
         71:53:63:d4:44:6d:3a:47:60:26:21:c8:2e:62:df:54:b5:d3:
         bf:1f:05:00:09:e1:72:72:20:f4:38:08:26:35:19:d4:25:78:
         0f:e0:0e:a0:4e:df:fb:3e:fa:ee:4d:a0:cf:85:80:3a:b1:88:
         05:64:e0:2a:76:90:76:5f:f4:90:c6:ab:3f:b0:f1:f5:a6:18:
         44:3e:fe:6a:4d:e8:b5:a6:05:af:c0:89:f2:b9:67:db:15:78:
         12:97:79:d0:6b:ce:8b:ba:4f:8b:f4:d0:c6:f1:d2:08:ad:06:
         39:d5:06:60:27:bb:f2:13:6a:50:a2:98:dc:71:9f:e4:47:4e:
         6a:0c:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:15 2026 by rpki-client