Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/c6ba5acb-5f13-35d6-9a43-f0bcf1c53829.roa
File:                     c6ba5acb-5f13-35d6-9a43-f0bcf1c53829.roa (raw, json)
Hash identifier:          UjqHpYKd0C/lWT30UW5t/LPZZRN0xzWNdzxb+YDejfQ=
Subject key identifier:   BF:EE:F0:AB:70:18:89:FF:93:AE:35:99:9D:8D:44:5B:FD:E0:97:C6
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584E7A64CF5CDA100FA8E3B83C00
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/c6ba5acb-5f13-35d6-9a43-f0bcf1c53829.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     22611
IP address blocks:        2605:f400:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:cf:5c:da:10:0f:a8:e3:b8:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=6e421c47-b6fe-4012-8534-5f29fc3a735e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:9e:e6:54:eb:28:5b:a2:f8:83:6a:32:d0:
                    dd:48:9c:48:85:cd:9f:83:15:bd:d4:fc:88:c1:8b:
                    6a:5a:07:2e:13:49:e0:6a:e2:55:20:6b:bc:33:2b:
                    74:41:41:b5:42:77:80:9f:7d:10:65:05:da:20:3d:
                    07:0d:76:e6:fe:f9:f8:29:d0:23:68:e7:77:dd:23:
                    90:26:c2:1d:60:73:93:ba:ad:22:bf:89:ba:e1:13:
                    d3:2e:06:8a:80:4a:4f:43:e1:29:47:fa:5a:79:77:
                    b1:a6:9b:d9:e4:0d:b2:4c:76:37:22:5d:04:dd:e4:
                    c1:a6:f1:0c:c0:12:79:b2:ec:d6:46:74:f1:9e:b4:
                    98:b4:a7:6f:65:8e:3e:9e:dc:f8:b6:14:24:c4:54:
                    bd:15:f8:ff:92:d8:73:20:08:e0:40:30:94:48:ff:
                    6d:94:15:13:d4:37:a4:ba:86:d9:4b:49:0b:71:a2:
                    55:69:52:db:86:d0:15:df:66:8e:d1:88:c7:88:8e:
                    90:5c:a9:a1:74:f8:f8:36:b3:99:43:75:f3:d2:58:
                    6d:ed:54:50:d9:e3:f5:59:12:bc:9a:87:8c:3a:45:
                    92:fa:7f:90:ea:1e:6d:7b:94:0e:04:1e:26:0c:b9:
                    f4:5f:52:f8:dd:e5:aa:eb:b4:5c:43:cf:f8:f2:32:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EE:F0:AB:70:18:89:FF:93:AE:35:99:9D:8D:44:5B:FD:E0:97:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/c6ba5acb-5f13-35d6-9a43-f0bcf1c53829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f400:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b6:1c:06:cf:82:77:29:30:96:be:66:7b:cc:77:36:90:d8:
         7b:d0:9a:61:b3:07:fb:2b:76:bd:e9:ef:c5:19:c5:00:f9:d3:
         b5:42:43:ea:07:35:a3:be:4b:7b:3b:ae:82:7e:26:d4:a0:cf:
         40:f5:82:8f:4d:11:82:bb:80:ea:51:ce:01:2d:db:e3:38:cd:
         40:7f:2e:83:ac:d8:75:a8:07:41:f5:c0:fe:ea:c5:92:db:e6:
         64:a8:9d:24:de:59:d4:c1:b0:ba:6e:29:34:3b:74:e9:ed:3b:
         a3:b0:3c:a1:3c:59:87:c0:31:24:a9:ac:f8:f3:44:da:5e:1e:
         af:1e:e7:d8:2a:98:05:a1:a4:b4:c7:f8:d4:46:3f:4e:c6:b6:
         15:31:4f:f1:ea:34:a7:66:32:b7:5c:5b:5d:73:09:1b:0b:18:
         ff:1c:06:f7:cc:a8:04:c2:08:f2:0e:e7:6a:d9:39:79:ce:e2:
         32:89:4a:a9:58:ac:04:3d:9e:14:c4:c3:38:f3:f0:d9:e6:13:
         86:18:c9:5d:dc:b3:ec:38:61:ba:0c:d5:93:ed:8f:ee:0b:88:
         42:61:0e:8d:29:52:96:7c:c2:53:59:9a:e9:96:1e:fd:38:a0:
         07:b9:8d:78:4e:1d:67:d1:d4:18:08:82:87:e8:d5:ba:7b:d1:
         37:a6:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:32:59 2026 by rpki-client