Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1fa04274-fc67-31d1-886c-53925e1ad307.roa
File:                     1fa04274-fc67-31d1-886c-53925e1ad307.roa (raw, json)
Hash identifier:          xtNEpjugtFY25j0qvlYZ18K/+f9WuerX2Tl8XOPyH4Y=
Subject key identifier:   B7:E6:1C:20:1C:D7:7E:1E:35:26:BF:85:B3:F6:29:88:5D:17:7C:0F
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584E6F3A24207E9D572F05623680
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1fa04274-fc67-31d1-886c-53925e1ad307.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     237
IP address blocks:        2001:468:26e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:24:20:7e:9d:57:2f:05:62:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=880fee22-f1f4-494d-a263-d21dba6cc650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:10:de:b1:59:75:09:a2:27:69:43:51:24:
                    97:3d:81:38:b8:29:31:96:b6:ad:e3:7b:a8:98:78:
                    e1:8c:2b:29:74:70:fb:cb:36:12:61:cc:44:bb:2a:
                    02:84:95:d3:c4:a1:a8:43:a3:f8:1c:16:0b:f0:10:
                    ee:43:63:b4:13:ea:ca:7f:ae:51:3d:28:03:ca:e3:
                    a6:8b:29:54:58:db:e0:d3:7e:8d:f1:42:ba:98:e6:
                    df:e9:bd:70:6b:f0:c8:18:63:29:4a:8d:5d:07:a0:
                    a3:12:c6:f4:23:44:9f:7e:af:56:79:fb:00:60:0d:
                    1e:f2:8b:f8:44:19:94:40:77:cb:86:76:16:fc:4a:
                    22:4d:0a:f4:d6:1b:df:a5:8a:01:d3:f1:85:13:d5:
                    98:0b:88:5b:de:27:37:d0:d3:58:2e:82:ff:62:6b:
                    a8:3f:47:0d:9a:e3:e1:b2:f6:1b:d2:89:8b:5e:2e:
                    b6:76:51:ba:ae:9b:8c:4f:32:e8:22:be:27:e6:68:
                    d8:20:4a:6c:cc:c6:4e:a1:d1:16:52:4c:da:12:9c:
                    d1:16:f0:09:52:e2:18:b3:46:8b:3f:44:36:7d:da:
                    36:b3:23:bf:d4:74:15:a3:c3:dd:9d:64:6f:ed:ef:
                    85:1f:e7:33:28:75:f7:51:28:c1:14:c0:59:3f:f6:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E6:1C:20:1C:D7:7E:1E:35:26:BF:85:B3:F6:29:88:5D:17:7C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1fa04274-fc67-31d1-886c-53925e1ad307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:26e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:64:64:cd:d4:0f:6f:d6:67:bb:0a:53:3e:af:48:b6:54:
         64:1f:ee:52:b0:9a:ce:b1:c8:2e:04:4b:b7:71:f1:62:d3:46:
         a4:10:cd:25:92:ca:1c:64:13:67:14:7a:45:38:26:d0:64:2d:
         90:6a:fc:25:de:b3:89:af:80:d6:3a:18:7f:75:6d:ff:17:9a:
         61:c3:42:be:43:11:3b:55:00:55:96:3d:f1:39:5c:0d:2a:5c:
         f5:94:ca:6a:f3:6a:44:6f:11:74:48:e2:fb:97:8d:9e:8b:2c:
         d6:02:34:ce:b8:85:36:30:78:8d:99:84:71:e6:12:18:a6:26:
         68:18:4f:f9:c6:cb:77:ca:5d:00:52:f8:4c:8e:72:47:71:13:
         c9:c9:e1:e7:51:40:05:7f:b1:0c:0a:d2:0f:c7:18:5e:e1:21:
         25:c3:73:e7:d7:ca:65:b1:e7:09:79:42:77:2f:14:e1:76:60:
         84:7f:ef:06:76:ec:32:34:39:b9:86:4d:dc:c4:02:fc:27:37:
         80:28:4a:f9:cb:8b:20:3c:b5:19:16:48:fe:15:25:5a:e8:91:
         9a:71:c8:d0:cc:5c:5c:10:2b:e0:4a:22:e9:fe:48:72:d9:05:
         84:42:3b:f1:82:ef:08:cd:b1:d4:29:8f:bd:81:00:74:cf:f3:
         9d:78:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:19:31 2026 by rpki-client