Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa
File:                     57424064-6a27-30a2-ad95-4bff0beaa8c5.roa (raw, json)
Hash identifier:          4PGXpwaPh508w97Joe866gVY/WFZQnbxOEnPhZ0f418=
Subject key identifier:   D7:52:31:B0:4B:AD:FD:3F:DB:DD:41:03:9C:E6:DA:0F:57:1C:14:F7
Certificate issuer:       /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial:       010D0C9F4328584E6F3A2351699FCEC0D276AE40
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     10439
IP address blocks:        2607:ff10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:23:51:69:9f:ce:c0:d2:76:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=5c264319-84fd-4f69-8404-e2613358b83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:60:73:1d:c5:ea:14:c0:0d:3e:36:fe:42:
                    24:4e:7c:1a:95:5a:9d:28:91:f2:69:1f:64:67:17:
                    a1:79:10:08:e3:90:83:e4:8c:ea:e3:da:5f:26:8e:
                    66:0f:bd:67:1d:12:e1:a9:9a:ca:48:5c:56:cf:cc:
                    a3:8b:dd:1a:49:e5:26:ba:37:34:47:b6:90:39:e3:
                    89:26:2e:3b:0c:69:1a:56:6b:c6:4c:17:f6:ad:8d:
                    06:72:c6:50:3a:92:1e:bf:e3:4b:98:f6:96:6c:23:
                    31:a3:81:7e:d9:4a:49:8f:da:97:22:69:c2:db:1a:
                    41:7d:2a:c1:c4:75:be:87:5b:bc:a0:a2:a1:70:a3:
                    9f:f0:3c:23:15:f2:2e:b6:8d:18:10:b1:37:18:78:
                    fb:3a:5e:e8:7b:1d:9a:77:7d:9b:ba:a6:4a:fa:54:
                    56:00:aa:d9:66:1b:04:28:60:e8:2f:83:a5:19:64:
                    7a:65:ad:a8:79:1a:aa:09:28:5d:50:3c:0a:ba:17:
                    7f:95:59:8e:fd:ac:6a:62:de:76:92:43:95:b0:0d:
                    db:ae:9a:c8:94:66:55:5a:f8:23:19:11:9e:28:9b:
                    f1:cb:bc:43:96:67:26:90:7f:3c:32:8d:90:3d:0c:
                    fe:35:9d:87:24:e7:da:be:49:11:b3:b9:91:96:e2:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:52:31:B0:4B:AD:FD:3F:DB:DD:41:03:9C:E6:DA:0F:57:1C:14:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl

            X509v3 Authority Key Identifier:
                keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff10::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f6:4f:5c:29:da:d0:29:c0:8a:68:a4:e7:45:21:ee:6a:26:
         bd:7c:2c:b0:dc:96:ac:06:b4:b0:69:fd:7d:97:e2:d3:de:ab:
         18:f3:55:08:ca:8d:bc:11:70:ba:23:35:ea:c0:c0:25:fc:6d:
         b2:3a:f9:55:9d:25:e5:7a:d1:88:b8:64:43:54:0e:55:e4:1e:
         89:a2:cb:ff:2d:91:23:f8:ee:2f:8c:f4:db:be:3d:5c:58:9d:
         7e:23:62:1a:d6:bb:0d:f3:50:28:49:a4:62:8c:21:16:ab:a2:
         8f:3b:14:b5:d7:81:36:ab:ec:85:1d:9d:d2:fc:19:48:29:c7:
         d0:5c:3e:b0:3e:83:2e:6a:f4:4c:7e:3c:eb:8c:8f:4c:e2:16:
         57:86:07:3f:c2:88:1a:80:23:70:20:a2:b5:b5:d0:5b:76:a4:
         12:9b:a5:46:a9:c3:67:b8:93:d3:fa:26:49:e7:44:98:ac:49:
         26:14:1f:e8:c7:a3:2f:4a:d0:b6:22:f3:ef:61:0a:33:3c:47:
         e2:66:ff:47:4b:0e:40:e4:0c:95:ec:eb:a9:55:d7:cf:2d:cf:
         de:61:7c:b7:2b:55:be:3b:9d:6c:85:b8:ba:f0:ef:42:c8:67:
         db:e3:a1:38:c4:52:be:aa:38:0f:14:ee:bd:58:0f:44:de:98:
         50:65:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:19:24 2026 by rpki-client