Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa
File:                     dbba7ca1-e240-340f-a279-d7e188661046.roa (raw, json)
Hash identifier:          pM/Wp44ishYFNkkBRoOoJjgwQIyhxTXE1Ot+jIFZapU=
Subject key identifier:   8B:33:BC:5D:65:3A:EB:76:A7:77:B9:F6:52:53:29:AF:36:8B:65:B3
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584E7204D3FD2C71EB667F8DA380
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     396982
IP address blocks:        2606:3dc0:8c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d3:fd:2c:71:eb:66:7f:8d:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=fc2c776a-b562-4b7a-95f8-55375e1c05ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:cc:d5:39:c9:a5:bd:3f:ef:1c:90:87:1a:
                    7f:90:dd:23:f2:18:1d:50:ee:6d:8e:5c:a3:f1:e0:
                    59:c3:f6:cc:9e:3f:f3:c9:46:a1:46:b6:e1:f0:10:
                    81:d2:00:e7:39:63:59:d5:b9:83:9a:68:8d:48:82:
                    e2:45:50:e9:58:aa:90:28:4f:68:5f:d1:f6:09:a5:
                    91:b1:2a:73:15:b0:37:7b:62:a5:84:41:64:97:73:
                    81:56:5d:a1:f7:6c:15:28:31:50:74:5e:b9:ee:d0:
                    04:27:d6:3a:e7:fe:8b:8c:34:9c:77:69:1a:20:cd:
                    30:f3:96:96:e7:62:5d:86:13:db:02:15:0d:69:41:
                    35:24:c4:b3:6d:7b:60:8c:50:c3:03:94:12:dd:a3:
                    a4:f1:22:b7:0c:ee:21:11:a6:86:23:05:29:f2:ec:
                    8a:d0:a7:5f:cf:bd:d9:f5:99:18:d9:96:a4:c5:b0:
                    bb:62:ff:c7:d7:da:a8:81:ac:05:05:be:77:e0:05:
                    fa:9f:79:1f:a8:a3:15:dd:df:f3:bb:ae:c3:ff:89:
                    fe:e7:ec:69:83:43:53:89:3f:d9:1b:44:72:3a:e2:
                    4f:5d:6f:07:e2:09:ac:72:15:76:a3:70:82:de:79:
                    39:05:6e:f7:52:80:1f:5a:3b:68:19:3b:b7:23:0b:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:33:BC:5D:65:3A:EB:76:A7:77:B9:F6:52:53:29:AF:36:8B:65:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/dbba7ca1-e240-340f-a279-d7e188661046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0:8c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:a4:e7:e7:ce:58:6c:96:68:2a:8c:b6:f0:e4:6f:c4:c5:4d:
         ad:b6:03:52:ed:8e:58:3d:74:57:b3:6a:ba:39:9c:83:d1:96:
         6d:83:be:e6:3d:6c:a7:bf:a7:e4:f4:71:08:44:ce:1a:2a:84:
         0d:64:b4:18:77:42:52:e4:29:ca:c3:01:74:84:2c:65:11:d6:
         31:05:1b:78:bf:35:23:91:25:dd:19:97:ed:24:ed:38:66:8a:
         ce:2f:fe:b3:8a:57:fe:17:09:bc:83:49:4b:74:52:bb:53:90:
         3f:62:91:50:ab:1d:d9:45:b3:fb:e9:8d:43:1d:ab:cd:6b:33:
         00:84:b9:e9:9e:7a:eb:3c:a7:c2:ba:d3:6f:ba:d8:26:26:e6:
         0f:4e:96:99:36:f9:07:bd:2c:b4:8d:f3:0b:80:95:9f:5d:4c:
         38:d9:06:7c:23:4c:71:48:fc:cf:22:2b:91:59:10:cf:9e:8d:
         9d:33:55:9e:95:fd:cc:64:3e:61:d6:a9:f1:f5:be:a3:0e:7a:
         14:e2:50:df:4f:d8:89:14:81:ec:c3:9c:cc:30:f3:97:f1:68:
         ac:56:f8:2f:ca:78:af:2b:43:3a:ad:11:28:f2:46:09:3e:b5:
         a6:45:82:23:a3:e0:e1:e9:65:59:9c:a5:26:ab:bb:97:57:36:
         54:f4:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:56 2026 by rpki-client