Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/0a02cb27-b8e3-3f91-9bdf-eb6085e363ec.roa
File:                     0a02cb27-b8e3-3f91-9bdf-eb6085e363ec.roa (raw, json)
Hash identifier:          zBtI8qk6CjCjRS3hChbj4ao2S0hgjinbNQmhn+jrQiw=
Subject key identifier:   A0:14:BA:AD:33:3C:2C:38:A0:1E:DB:0D:01:C5:E1:F9:C4:17:C7:71
Certificate issuer:       /CN=a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc
Certificate serial:       010D0C9F4328584E7634CB6561F2D397518D1BA0
Authority key identifier: C6:16:7B:95:BB:5B:EF:FC:BE:4B:AB:89:06:71:A6:53:41:1D:43:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/0a02cb27-b8e3-3f91-9bdf-eb6085e363ec.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     40464
IP address blocks:        2607:6700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:cb:65:61:f2:d3:97:51:8d:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=c7f51283-7834-4c63-ba76-379205d401fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:08:45:ea:72:b4:38:0b:43:ad:00:18:d0:
                    0f:0f:09:d1:1a:a9:23:0b:75:51:c4:83:fc:92:8a:
                    70:ae:50:85:f9:49:26:06:fb:4d:0b:cd:b1:6a:7b:
                    c0:ec:06:88:b3:1b:e6:ba:9e:99:35:6e:0a:f3:8a:
                    d3:60:22:17:ac:01:9b:48:0f:23:67:0f:31:21:e5:
                    ff:9d:95:45:49:b9:32:c2:b5:93:b8:02:9c:8f:d4:
                    f0:de:ea:fa:27:39:50:6e:d1:24:8a:aa:5e:f6:74:
                    36:a8:69:31:6f:17:f2:c7:a9:06:0e:ed:f6:7e:72:
                    6b:6b:1d:29:8b:9a:49:e8:67:b6:3a:70:80:b8:54:
                    65:bb:76:fd:cb:71:67:2f:76:22:0d:40:68:e5:34:
                    7b:59:70:2a:08:c7:c2:e1:9a:f1:84:f6:90:5f:2f:
                    d9:ed:87:8e:21:e3:87:54:c9:aa:cb:7a:e7:8a:6d:
                    77:ad:a9:93:37:0e:89:47:23:0e:14:55:d5:22:ba:
                    08:0d:f9:37:3a:39:72:4c:10:99:32:68:f0:4c:4d:
                    dc:66:8b:68:c3:9c:04:95:00:eb:9c:e3:5f:c9:c2:
                    58:c4:2c:02:2f:57:58:9d:86:58:bb:cb:e8:18:3a:
                    91:44:76:f4:9f:ed:e8:2a:f5:8b:f3:c9:5f:a3:6b:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:14:BA:AD:33:3C:2C:38:A0:1E:DB:0D:01:C5:E1:F9:C4:17:C7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/0a02cb27-b8e3-3f91-9bdf-eb6085e363ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.crl

            X509v3 Authority Key Identifier:
                keyid:C6:16:7B:95:BB:5B:EF:FC:BE:4B:AB:89:06:71:A6:53:41:1D:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:e8:e5:37:50:49:91:1f:69:61:35:fb:98:c6:81:4c:b1:cb:
         51:94:9b:bd:76:ef:b7:9c:31:e8:81:6a:15:fd:90:5d:0d:f7:
         90:39:f0:aa:38:96:32:e3:46:41:01:20:5a:9f:12:07:3e:3f:
         ae:15:ea:d6:9f:83:92:d5:c8:35:3d:41:e5:e2:c3:9a:3f:ce:
         f1:93:66:1e:6f:f5:aa:b9:09:aa:22:dd:41:5b:18:0a:17:13:
         31:1f:68:4e:a3:67:d5:25:d2:45:f9:5d:35:d6:e4:bc:9a:56:
         a9:17:19:c3:93:2c:3c:40:74:ed:27:c5:e2:07:8e:28:67:9b:
         b4:66:e3:86:08:b3:8e:ac:4b:8c:34:68:88:67:50:3b:40:7d:
         7f:6c:bb:ae:2c:4c:b7:32:2f:ec:82:cb:02:b5:ed:4b:d5:8d:
         cd:90:90:02:4b:d4:da:fd:62:51:47:7f:8e:c9:f4:94:d7:6c:
         e7:3c:13:1d:5c:14:e7:42:20:de:ad:68:bc:52:0b:ea:a9:ff:
         54:99:e2:d5:67:f6:38:8f:8d:4b:26:56:70:7f:68:c1:33:70:
         59:9d:9e:37:ab:3f:72:74:4a:a1:ad:84:66:a9:93:f9:06:da:
         e7:3b:dc:30:ae:0c:e1:27:04:2e:0c:ee:c4:ee:3c:88:d8:3f:
         dd:3e:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:14 2026 by rpki-client