Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/06ed8f59-75d5-38f6-8967-dddfc5d1b1b0.roa
File:                     06ed8f59-75d5-38f6-8967-dddfc5d1b1b0.roa (raw, json)
Hash identifier:          P28KjCF5BO88R97cB/xrrCfMd7Kyxo3EiObR4AMzq1U=
Subject key identifier:   19:60:82:DB:1D:02:FD:7C:8D:7E:E8:A3:30:A9:BC:A9:34:E8:6F:FB
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584E7204D4F0027ECC05F947EAB8
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/06ed8f59-75d5-38f6-8967-dddfc5d1b1b0.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     398573
IP address blocks:        2607:2240:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d4:f0:02:7e:cc:05:f9:47:ea:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=9de841bf-128a-4f26-9af3-20f14ee84f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ea:26:69:14:44:15:92:84:5f:ca:8d:61:39:
                    0c:b8:9e:c6:ee:be:ac:94:fa:d7:37:15:3a:93:14:
                    bb:66:b2:5d:33:8c:b4:07:78:ce:23:c6:87:77:23:
                    94:a8:e5:07:2a:0f:70:25:86:14:1f:cd:e1:1f:12:
                    10:89:a5:52:2f:4e:d5:04:b1:8f:1b:16:1b:33:ee:
                    62:0f:29:20:e0:99:61:0d:e5:75:0e:01:ba:35:3d:
                    bc:60:8e:e3:a2:13:c8:0d:0d:07:d5:8f:51:16:e7:
                    8b:af:78:3f:ac:b1:da:2e:89:e8:cd:c1:91:ae:8f:
                    e2:f9:29:35:01:56:d8:8a:a1:1c:70:02:64:12:2e:
                    e9:fb:69:f4:86:18:a6:35:0f:b4:8b:32:1d:79:ed:
                    d6:8b:65:f4:b5:f5:53:04:9c:2a:b8:e8:c5:5d:68:
                    07:86:9c:b7:1c:de:02:5d:08:7a:24:d7:ed:11:70:
                    c7:ff:96:1d:94:3f:de:9d:90:e1:6e:ee:89:d2:2e:
                    e7:e0:86:aa:63:bf:0e:8a:63:bb:7f:db:59:42:21:
                    46:eb:54:36:11:6e:76:15:7e:73:40:20:c3:85:53:
                    f1:fa:e2:6d:87:87:cf:ef:e2:ac:38:f1:42:75:2a:
                    71:d6:4d:9b:d1:21:04:7c:81:ab:e9:d8:4f:f2:71:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:60:82:DB:1D:02:FD:7C:8D:7E:E8:A3:30:A9:BC:A9:34:E8:6F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/06ed8f59-75d5-38f6-8967-dddfc5d1b1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:eb:62:8c:2d:03:2a:81:cd:ad:fc:5b:ee:c4:61:91:19:b0:
         d2:4f:d4:60:2f:e7:71:fd:cf:af:80:38:25:fc:36:23:34:03:
         3e:69:18:ed:8e:6d:7b:ae:f2:1c:83:1d:a7:6a:48:2e:87:39:
         21:b8:63:d2:03:bb:5d:d8:50:5e:f1:f9:bd:6b:41:9c:06:86:
         fa:c0:ac:5d:c1:35:b6:88:cb:f9:36:a0:42:fc:ce:3b:bb:0a:
         6e:1d:dc:49:f5:a7:25:43:53:13:13:2c:16:62:12:b4:ed:28:
         6e:a0:81:ce:c8:9e:2f:98:10:1b:e8:48:e0:34:19:09:e1:98:
         2f:b0:0c:41:54:32:34:f4:9c:f4:85:8f:81:3b:75:64:44:a1:
         71:9d:78:d0:e2:9c:e8:7d:1e:b8:e1:58:39:d9:74:7a:44:97:
         73:cc:bc:5b:5b:6f:aa:75:24:65:3f:b7:36:ac:66:6a:c8:39:
         4a:41:61:5f:68:f7:5a:72:a5:a9:b3:d8:94:9b:f5:10:42:2b:
         36:6c:d6:cf:9e:24:0d:c3:9e:61:0b:bc:85:20:0a:ef:2e:f9:
         8a:a2:99:26:5b:5e:57:78:df:14:f5:ae:7b:36:05:f2:eb:6c:
         a0:2b:ee:f8:21:67:d8:40:52:37:9c:96:fc:c6:d7:a5:3c:09:
         4b:55:29:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:01 2026 by rpki-client