Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/19df3cb7-3c60-3203-a11b-0d14f4589b83.roa
File:                     19df3cb7-3c60-3203-a11b-0d14f4589b83.roa (raw, json)
Hash identifier:          gPNpZ0+XVPjrrNHLTpeZCIWIcg5JxLwT7TE4pLAhaDc=
Subject key identifier:   86:E9:F6:F5:43:A4:EA:8B:57:45:B1:ED:00:D9:9E:7C:83:56:41:32
Certificate issuer:       /CN=4ee6a656-8b84-4850-8417-d53e22107f20
Certificate serial:       010D0C9F4328584E5EA5ECAA4056908B8EDF1100
Authority key identifier: 99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/19df3cb7-3c60-3203-a11b-0d14f4589b83.roa
Signing time:             Thu 02 Jul 2026 22:28:49 +0000
ROA not before:           Thu 02 Jul 2026 22:28:49 +0000
ROA not after:            Wed 30 Sep 2026 22:28:49 +0000
asID:                     17378
IP address blocks:        2605:7700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:a5:ec:aa:40:56:90:8b:8e:df:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee6a656-8b84-4850-8417-d53e22107f20
        Validity
            Not Before: Jul  2 22:28:49 2026 GMT
            Not After : Sep 30 22:28:49 2026 GMT
        Subject: CN=e4468c3f-b564-4ab2-894b-0f95416dd8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:eb:50:b5:f7:ef:71:8f:0e:d5:a0:ba:36:
                    12:1f:7f:d3:67:da:ec:72:a8:40:49:d4:92:f8:7b:
                    3c:42:33:9e:db:44:ea:b8:e0:de:2a:28:03:8a:1f:
                    7e:10:8f:3d:a7:7d:fd:6b:cb:c4:99:69:23:10:df:
                    2e:db:17:95:fa:a3:11:e9:9c:a1:7a:07:9d:ed:1f:
                    1b:de:93:38:60:3d:9d:52:f4:99:c9:19:4d:3f:d8:
                    75:84:ff:d7:b9:e6:2d:3d:d5:9e:79:f3:d1:18:ce:
                    6e:6c:65:9e:03:3a:47:3f:17:92:55:74:29:94:88:
                    96:5a:e7:30:e7:45:0c:bd:7d:f7:8c:01:0f:84:09:
                    7d:37:f4:07:33:1c:54:58:a4:7c:6a:2a:32:80:67:
                    27:46:46:cc:04:6a:94:8e:d2:ca:a2:d2:de:9c:c2:
                    27:49:c5:c8:65:70:b0:ba:88:b9:2c:f4:2f:e3:cb:
                    a3:e8:40:d5:29:1e:72:fb:4b:82:df:a1:d4:35:12:
                    12:85:a5:d9:b8:e0:60:d9:f5:2e:60:9c:82:48:fe:
                    87:07:c3:fc:0d:47:0d:6e:88:f4:79:ba:35:37:84:
                    6c:6f:37:92:a0:3f:83:f8:23:34:07:57:12:71:1e:
                    98:b0:3c:b7:78:30:01:76:e5:b2:4b:5f:7a:1f:b1:
                    d6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E9:F6:F5:43:A4:EA:8B:57:45:B1:ED:00:D9:9E:7C:83:56:41:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/19df3cb7-3c60-3203-a11b-0d14f4589b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl

            X509v3 Authority Key Identifier:
                keyid:99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7700::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f8:a7:ea:bc:6e:ee:aa:9a:dd:93:7d:da:44:41:21:51:6a:
         da:e0:a7:76:57:a0:b5:04:96:6f:be:49:a7:63:36:d9:fe:07:
         dd:04:25:b2:5e:3a:05:00:d6:e9:0f:79:61:78:e6:03:67:93:
         8e:0d:ea:7b:ce:b5:a0:91:3c:cd:5e:08:29:e5:b9:de:a2:a3:
         8e:59:f1:36:27:7b:97:5e:29:e2:07:87:cb:4d:3a:60:bf:21:
         eb:cb:34:45:81:3e:a7:70:4e:08:9d:fd:70:18:5a:f7:67:8a:
         c5:71:5a:56:d8:6d:b8:13:bf:2f:80:36:cd:ad:39:77:bd:d6:
         45:e8:74:bf:68:60:12:40:04:06:5c:fb:b9:46:64:ce:6d:25:
         28:f5:5e:c0:52:f8:e8:43:99:11:cb:de:6c:a9:df:5d:8e:df:
         54:47:a0:cb:76:bb:50:0a:f4:02:1c:b5:a5:be:f3:07:ce:61:
         7c:ef:30:21:95:a5:59:e7:0c:a0:9c:b0:b0:be:9e:00:42:f7:
         10:77:c5:de:c2:f5:86:46:20:e2:f2:a2:f7:8e:8e:d2:5f:e8:
         d4:5e:f0:c1:d9:f5:79:e8:bf:f8:64:20:fb:33:3a:6f:2b:fc:
         06:64:87:ce:00:3e:2a:60:e5:61:80:ff:97:b0:54:f9:da:ba:
         ba:d3:da:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:16 2026 by rpki-client