Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa
File:                     3c215373-ba4c-387d-b2fe-0739ac64f909.roa (raw, json)
Hash identifier:          3hiIRu/+FzCkHTU3tQxxaX7J7lgPVNBHa0qju6Nkk0Q=
Subject key identifier:   FC:75:2D:D4:6D:42:C7:70:9B:A5:2E:74:79:88:72:D6:BC:55:80:31
Certificate issuer:       /CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
Certificate serial:       010D0C9F4328584E86F4FF40219FB8A78F86B1C0
Authority key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     53823
IP address blocks:        2606:48c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ff:40:21:9f:b8:a7:8f:86:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=767dcc30-2d9a-498e-a146-60fff68aa31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:40:11:e1:4d:68:cf:f9:99:59:93:72:e3:
                    d0:a2:55:b0:60:a5:cc:2c:89:c8:f3:ed:1f:3a:21:
                    35:1a:f4:dd:1c:d7:70:3a:7f:8a:a3:92:7b:aa:8c:
                    e1:02:a7:8a:92:ba:44:e4:20:c7:d4:47:49:99:7e:
                    db:5c:71:23:0f:a0:5f:91:d8:9f:75:b3:4c:a1:ed:
                    7b:cd:87:86:3d:71:83:71:cf:79:08:40:ad:fb:35:
                    eb:9a:9c:c1:bd:98:79:bf:20:a3:c9:a2:3f:dc:43:
                    6d:30:0f:41:d0:54:9e:e3:c6:7b:31:07:fe:72:54:
                    af:09:71:e5:e7:c5:a2:59:53:fe:d4:77:c2:52:7d:
                    19:71:b8:33:96:c1:97:8a:90:7b:6e:3c:da:8e:56:
                    bb:65:64:da:08:d7:94:57:1b:57:15:50:c7:cc:8d:
                    20:da:d4:49:f4:a2:be:51:0f:dd:fc:b9:77:c4:a4:
                    45:ce:08:e4:d1:2c:b4:75:b5:e0:94:1f:14:46:30:
                    77:96:b5:8b:91:7e:b0:52:bb:39:bd:40:da:9b:d5:
                    3e:a1:d2:c9:8e:24:fd:90:19:cf:83:a2:63:ed:9a:
                    91:89:c2:3d:94:1f:a1:91:31:62:9e:b1:ff:da:64:
                    bf:61:5c:76:4e:5b:df:f6:b8:31:93:16:45:60:f6:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:2D:D4:6D:42:C7:70:9B:A5:2E:74:79:88:72:D6:BC:55:80:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl

            X509v3 Authority Key Identifier:
                keyid:7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:48c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:39:de:35:03:23:c2:f7:e3:d5:9f:d9:a3:20:36:ad:bc:
         d6:c6:6c:c3:31:20:50:b3:8b:c0:2a:81:e2:6b:df:01:68:c9:
         ec:24:41:48:d9:59:9d:93:3c:31:a4:96:3d:84:5d:86:bf:ad:
         ce:3d:b6:3b:62:ff:54:38:b6:d7:9b:c0:a2:81:da:0d:82:55:
         68:08:28:d6:00:e0:56:54:e3:42:84:67:c8:0b:e5:d1:51:6a:
         6b:79:e9:47:50:52:93:8a:92:9a:0a:d6:be:d4:df:64:2d:45:
         37:d7:b5:03:17:06:c6:30:6e:e1:d1:b6:dd:39:cc:50:d9:61:
         53:90:34:7a:35:90:d2:16:84:f3:86:b8:9e:b6:36:0c:77:06:
         89:ba:1f:43:42:96:f3:ff:92:ae:77:22:fa:94:7f:fc:1b:2a:
         8e:c7:ab:5f:ca:67:77:31:ec:16:7b:07:86:85:59:93:d5:d9:
         05:cc:8c:87:fc:69:74:e2:39:12:d0:14:e0:5b:7a:1b:fb:3b:
         28:53:20:8d:eb:76:2a:e7:00:b9:c4:45:5a:d9:78:44:d5:b9:
         0f:69:9a:18:61:e6:d4:ba:24:65:aa:67:01:d5:2a:ff:91:1a:
         3d:02:59:a6:4f:bd:f1:4b:5b:be:4e:8e:3b:a6:f4:2f:5c:ad:
         23:a1:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:06 2026 by rpki-client