Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1ff3cc78-1b71-3917-8529-671ea1a68fe2.roa
File:                     1ff3cc78-1b71-3917-8529-671ea1a68fe2.roa (raw, json)
Hash identifier:          toht2GO9i1rOPpNKykrNal+XI9IHhc7BG3e714V8SUc=
Subject key identifier:   41:31:CD:EE:5D:CE:BC:B0:53:31:E5:C2:99:9C:E6:FB:A8:6C:90:BC
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E5D14B771D6414D4CA3805C80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1ff3cc78-1b71-3917-8529-671ea1a68fe2.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2605:4300:e602::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:b7:71:d6:41:4d:4c:a3:80:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=916c002a-3ebb-42ed-ac7b-c28825b764eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:12:86:69:d0:93:4b:92:7b:4d:10:a6:4d:
                    e7:00:9e:f0:74:f7:af:79:7b:1b:b4:9b:ef:28:ca:
                    5f:d1:20:bf:8d:71:3d:d6:5d:2f:5d:e1:0d:79:61:
                    17:3b:92:a9:66:cf:e1:9e:05:f5:e1:c0:b5:1e:3c:
                    b9:9a:ec:71:67:0c:a9:3b:35:ee:ac:ac:07:5c:03:
                    b4:01:ee:6f:80:4b:f4:7a:bd:97:d0:79:66:56:97:
                    db:fd:c0:76:ff:da:a9:21:f0:33:c0:a5:a3:f7:d7:
                    74:e9:13:ed:7c:dd:f6:d1:97:35:d3:34:f1:1d:ec:
                    b0:c9:4f:ae:c5:d6:30:7b:59:58:89:19:8a:f8:ca:
                    53:ea:ad:4a:e0:29:af:21:cc:d9:d1:04:39:32:a7:
                    46:24:11:71:de:07:19:94:3f:f6:72:6d:68:83:eb:
                    28:b3:7d:f3:3c:b1:52:0d:a3:4f:0f:3e:aa:fb:ba:
                    ac:77:4e:6e:f5:55:5d:9a:ef:97:2c:58:69:0b:c7:
                    18:7b:58:a0:72:05:67:31:e5:2d:9d:5d:71:4d:81:
                    35:86:f2:92:b3:58:99:65:cd:c0:88:d6:01:db:64:
                    81:12:2f:dd:3a:b7:2b:de:17:9b:a7:1e:66:45:33:
                    ad:10:8a:92:18:e3:e3:34:f7:2f:15:bd:83:50:a4:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:31:CD:EE:5D:CE:BC:B0:53:31:E5:C2:99:9C:E6:FB:A8:6C:90:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1ff3cc78-1b71-3917-8529-671ea1a68fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:e602::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:37:74:2c:84:37:80:b0:02:2e:6d:6d:dd:91:b0:ef:0e:
         eb:43:4b:fc:9f:64:d6:1a:87:c0:96:cc:a9:ec:14:50:a1:89:
         9b:f0:c0:67:a7:f2:26:ee:cd:6e:81:48:7d:05:55:86:10:88:
         19:55:93:25:aa:5e:43:7c:b7:c3:db:45:a1:6a:0d:e5:b3:38:
         a4:b8:73:34:bc:d4:d8:16:fd:4b:f5:44:97:2f:0b:e4:ae:f7:
         b7:f6:9d:dd:b9:50:36:16:d2:8f:fa:16:72:f8:4d:32:74:23:
         69:e7:bd:42:32:40:5e:16:a0:fb:db:a5:71:59:3b:c8:3e:40:
         70:ff:ce:55:df:3b:fb:3d:1d:7d:2b:d8:5d:68:0c:e0:b4:6f:
         48:2f:c2:9f:d2:92:9f:7e:2f:45:cc:7d:2b:03:fa:10:28:44:
         00:63:d1:68:06:2d:db:96:e5:fe:44:4a:ef:60:50:be:a6:65:
         47:29:55:85:b4:91:4d:1e:9f:b7:8c:dd:69:76:b0:79:15:59:
         97:bd:e6:c9:fe:69:d3:e2:0d:0d:83:8a:db:3f:ce:d4:5e:b4:
         dd:1b:aa:37:e4:1b:c5:6c:e1:56:16:18:a9:ff:44:11:1e:a3:
         48:77:98:c6:b5:73:1b:e2:48:53:88:70:2a:f1:f8:30:14:47:
         1e:e8:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:46 2026 by rpki-client