Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/99ae37fc-bef7-3460-9d52-50fbd718b4a6.roa
File:                     99ae37fc-bef7-3460-9d52-50fbd718b4a6.roa (raw, json)
Hash identifier:          ARgD1Q8VUMnNx/iNKHY0ZTFvnpFU6YysNHXTsWDCKso=
Subject key identifier:   8C:35:BB:49:A2:9A:7D:5D:EE:C3:9B:9C:38:C0:12:45:FF:10:86:BD
Certificate issuer:       /CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Certificate serial:       010D0C9F4328584E779A343AC5F70E9C93FA0920
Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/99ae37fc-bef7-3460-9d52-50fbd718b4a6.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     174
IP address blocks:        2607:e680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:34:3a:c5:f7:0e:9c:93:fa:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=04bd7351-fdcf-429a-8795-e22f3de37e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:67:37:37:17:6a:7c:88:bc:1e:17:36:32:
                    7c:d6:1b:18:8e:9f:a4:e9:9e:53:f2:e0:30:22:47:
                    1c:eb:c2:5c:a1:e8:66:8c:98:2b:8b:fd:72:82:08:
                    cc:40:07:40:e9:19:10:91:6c:b3:a8:a5:ac:4c:77:
                    ce:b2:74:96:cd:c6:36:d2:9d:59:73:f6:03:da:fb:
                    9f:46:b2:f6:1e:5e:51:a5:5d:cc:a2:1e:1d:91:cb:
                    54:7f:21:4c:d5:eb:32:bd:57:d9:87:d0:5a:57:fd:
                    52:8b:81:8e:39:47:e1:a5:72:0a:8a:4b:b7:1a:8c:
                    6c:f8:e2:17:9c:2b:52:2d:47:b8:f3:c6:7a:f7:c6:
                    37:84:23:6a:8a:4d:6b:89:d3:0e:46:f8:88:2f:11:
                    d2:1d:52:3f:92:fb:15:30:f6:e8:37:c6:e4:3a:e4:
                    d4:4b:c5:59:8e:66:db:ba:80:f4:53:20:8a:f3:41:
                    19:48:d0:42:b5:d6:74:07:70:71:78:10:73:00:21:
                    e5:b1:96:5d:5e:50:40:71:3a:c5:31:da:b9:38:8d:
                    a1:e8:d6:af:08:9b:6e:97:14:ad:ee:71:b3:7c:8c:
                    90:9d:81:2e:38:de:8a:98:c2:dc:d0:d2:af:b3:65:
                    7c:2d:cd:68:09:77:c2:19:f7:d8:b6:d5:d4:eb:67:
                    e4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:BB:49:A2:9A:7D:5D:EE:C3:9B:9C:38:C0:12:45:FF:10:86:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/99ae37fc-bef7-3460-9d52-50fbd718b4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl

            X509v3 Authority Key Identifier:
                keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:e9:a9:7b:ef:5a:cf:bd:9f:8f:b8:93:57:7c:89:63:67:
         91:d2:37:1a:d1:01:ad:48:ab:b4:92:38:b5:fc:9d:42:5c:00:
         74:77:7d:bc:da:0f:c3:6f:64:43:80:d3:82:19:a5:fb:89:ce:
         cb:44:29:2b:0b:cc:21:c8:a6:ef:57:06:9e:18:23:81:16:7a:
         00:74:2f:25:4e:49:17:45:d7:1e:55:71:13:aa:ca:fe:a2:09:
         5d:16:c2:bc:8e:d6:1c:d1:3c:56:58:73:7a:56:fb:f9:10:e9:
         db:6d:69:a6:2f:a2:ae:23:6c:c3:56:28:45:72:ad:7e:7a:70:
         61:c2:bb:cb:c1:1b:72:ff:f1:eb:09:41:3e:51:53:6e:e4:e2:
         92:9e:8a:9e:57:6c:e4:ca:50:71:18:70:17:bc:d0:1d:84:6e:
         32:39:37:38:3d:de:cf:54:56:42:4d:c6:e9:12:85:db:4b:62:
         b9:6d:89:db:67:25:7e:e2:34:fb:02:c1:20:4c:4a:27:35:09:
         dd:a0:44:29:a9:6d:13:a5:e6:94:71:44:33:7e:aa:0b:96:15:
         8c:fc:f3:69:f4:a6:6d:24:67:35:61:84:ce:76:fe:a4:a7:42:
         20:d5:b4:7d:ad:01:8a:4d:56:be:e7:6e:a6:cc:96:8f:38:06:
         57:66:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:30 2026 by rpki-client