Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa
File:                     c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa (raw, json)
Hash identifier:          sxJXYId8t3yveDAvLUY7EYjBdTPHs8VRy7YZDlOvE/A=
Subject key identifier:   77:59:59:D0:56:69:A7:06:49:86:4A:72:E8:B8:4C:9E:F2:AD:03:AA
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584E885A396D6CD31C54B0D5A980
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     26277
IP address blocks:        2607:3fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:39:6d:6c:d3:1c:54:b0:d5:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=91f3c754-fed4-4616-ad4e-851d0724251b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:03:09:26:3b:82:74:73:fe:65:b3:92:bf:
                    ef:b8:29:0d:ec:07:4a:04:2d:bc:b9:10:6e:d2:62:
                    fa:45:10:12:34:dc:2a:f4:b5:6b:c9:c3:35:ba:62:
                    9e:5d:87:66:24:0e:cd:a3:2a:73:63:bb:f5:25:14:
                    ad:39:fe:74:5b:3c:44:09:8c:3c:97:6e:df:eb:9d:
                    0e:3d:cc:50:f4:cb:a3:af:72:68:1e:74:71:01:09:
                    d0:33:dd:53:c6:ec:8c:eb:24:25:73:56:a5:6f:d7:
                    65:e4:2a:9c:54:2f:0a:e3:5c:d5:4e:3c:16:86:d3:
                    d1:55:95:3c:1f:82:e3:5a:2d:d2:8e:7a:a9:0d:9b:
                    dd:6a:d9:7c:a3:3f:a4:52:be:61:6d:07:9f:6f:04:
                    af:31:16:d8:ca:3b:65:db:a3:3f:c2:8b:0a:43:8a:
                    87:26:c3:b9:a6:a0:35:ed:44:83:21:47:00:30:9c:
                    11:d9:70:9f:b9:87:a7:5a:1f:f7:85:88:62:61:7a:
                    7b:92:8a:0a:9c:af:ed:39:6b:80:72:c9:7e:ea:92:
                    bc:2a:65:c7:7a:cd:ec:1e:63:3e:aa:42:3b:3c:3b:
                    d5:05:03:20:ad:ba:6d:c8:97:a0:55:dc:48:ec:41:
                    3f:95:84:ac:4e:11:78:69:f0:17:99:1f:17:49:92:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:59:59:D0:56:69:A7:06:49:86:4A:72:E8:B8:4C:9E:F2:AD:03:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5a:bb:25:bb:26:0f:7d:79:81:06:ca:dd:79:3f:02:ea:c9:
         39:8e:d0:1b:0e:d6:15:e1:27:e7:6a:60:3c:2d:6c:f7:82:a5:
         69:a9:bb:fb:38:d3:e3:1b:24:ed:e2:d2:c9:c0:b7:07:b0:ea:
         73:f1:fb:3e:fc:26:c6:70:77:8c:47:8e:82:65:e1:a4:52:c5:
         2a:e6:0b:75:2d:97:d3:23:e9:87:92:a8:43:09:5a:bb:2a:aa:
         7b:8b:0a:97:0d:d3:37:1d:f1:67:f5:21:88:9b:dd:15:c6:ea:
         ae:b4:0b:9f:4d:fa:6f:a8:d5:4f:9f:37:19:00:79:f7:c8:06:
         af:f2:67:e2:66:0a:5f:f0:f4:9f:97:2a:30:44:c4:3d:14:61:
         fc:92:8f:c6:12:cf:aa:a2:e4:d9:11:76:cd:1c:9e:8b:b1:7f:
         08:a9:5a:9f:45:c5:8b:87:f6:b4:5d:95:eb:a1:67:db:17:59:
         e5:eb:76:21:a1:cc:b0:33:52:12:22:0a:31:41:e8:01:95:4d:
         00:72:01:94:e5:ad:60:df:6f:f7:ff:b1:e6:ac:72:40:9c:fc:
         75:94:32:0a:9f:b8:e5:db:44:43:c6:98:36:05:84:6a:11:cc:
         b1:cb:3b:94:18:74:e3:24:6e:11:2b:0e:44:0e:77:03:5e:7c:
         c7:1e:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:52:47 2026 by rpki-client