Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806/98660539-9b21-3bca-a1e9-d7341d07b12b.roa
File:                     98660539-9b21-3bca-a1e9-d7341d07b12b.roa (raw, json)
Hash identifier:          qmMG3WcCSLo4QfslLZqRCyOMZC+kRqGYLUCuBdgf4jI=
Subject key identifier:   69:B4:A3:AF:27:6C:1C:A0:B2:FF:F1:D4:2E:DF:58:99:F8:5A:42:4B
Certificate issuer:       /CN=de4c4762-c295-4d75-a52b-1101dd3ca806
Certificate serial:       010D0C9F4328584E85413EC228ACAB3D98565000
Authority key identifier: B9:8C:53:25:AE:61:65:F1:86:BD:24:B6:00:9C:24:8C:C9:90:C1:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806/98660539-9b21-3bca-a1e9-d7341d07b12b.roa
Signing time:             Thu 16 Jul 2026 18:22:29 +0000
ROA not before:           Thu 16 Jul 2026 18:22:29 +0000
ROA not after:            Wed 14 Oct 2026 18:22:29 +0000
asID:                     402767
IP address blocks:        2620:f2:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806/de4c4762-c295-4d75-a52b-1101dd3ca806.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806/de4c4762-c295-4d75-a52b-1101dd3ca806.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:41:3e:c2:28:ac:ab:3d:98:56:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4c4762-c295-4d75-a52b-1101dd3ca806
        Validity
            Not Before: Jul 16 18:22:29 2026 GMT
            Not After : Oct 14 18:22:29 2026 GMT
        Subject: CN=b6e332ac-123d-4b4c-8991-496350204905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:56:a8:61:83:bd:7c:a2:8b:e0:f2:d8:32:
                    ac:c6:f5:48:41:da:b8:8a:4f:62:ab:02:f2:03:41:
                    ed:55:93:91:82:38:ed:93:38:ab:71:e6:29:cb:c0:
                    24:70:05:d7:88:99:73:c2:ca:9d:3a:e3:94:8d:a1:
                    c3:ab:19:bb:70:a1:14:4e:35:1a:7d:0e:63:f9:22:
                    25:98:15:7c:f9:e1:fe:c9:2d:73:47:36:a6:4b:c4:
                    9f:f0:63:4d:c7:d9:c8:c1:48:e0:40:40:20:dc:fd:
                    63:ac:dc:e2:9d:08:49:3f:ac:46:88:58:56:e7:1e:
                    81:d3:5c:b1:bf:01:7b:d6:bd:64:f7:53:25:0a:57:
                    e6:3d:3c:c6:c1:47:64:a1:61:50:a1:69:d9:79:49:
                    7b:c0:aa:48:8d:b4:46:8c:a4:23:e8:10:57:40:01:
                    ea:b0:73:e6:62:f3:d3:02:5e:67:97:49:e9:b0:b8:
                    0b:a1:19:7d:aa:61:6c:19:94:d4:61:75:7c:f5:ad:
                    17:ef:1a:1d:9a:ce:4c:62:ae:b1:8f:9a:b2:0b:43:
                    44:37:f6:13:e1:fe:22:af:25:a0:02:5d:5a:76:c1:
                    7e:b3:43:81:d8:dc:b1:ec:4d:92:d7:ce:a7:81:a6:
                    de:18:4e:bb:95:52:f5:02:53:8d:c7:9c:dd:e7:52:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B4:A3:AF:27:6C:1C:A0:B2:FF:F1:D4:2E:DF:58:99:F8:5A:42:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806/98660539-9b21-3bca-a1e9-d7341d07b12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806/de4c4762-c295-4d75-a52b-1101dd3ca806.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:53:25:AE:61:65:F1:86:BD:24:B6:00:9C:24:8C:C9:90:C1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de4c4762-c295-4d75-a52b-1101dd3ca806.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f2:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:27:08:36:74:c3:71:74:68:1f:5d:7c:bc:cf:ee:7e:57:
         a9:ff:7d:55:47:27:cd:58:cc:a6:22:33:a4:39:81:80:51:eb:
         a1:8a:23:20:08:03:b0:d1:71:0a:36:86:82:59:e9:9e:57:ab:
         ed:ba:16:04:9c:91:c7:d5:86:7a:6b:7d:82:c1:b5:da:f7:83:
         b2:fe:4b:96:4c:5d:63:a4:83:92:19:51:9f:b9:09:c8:ee:b9:
         b3:aa:21:59:8b:7f:fd:d5:8e:b3:d5:51:33:71:b8:0a:09:08:
         a7:01:2d:ab:5e:65:6b:c3:1b:3f:1a:99:14:d1:4f:11:77:6b:
         35:98:31:3c:0d:c3:46:2f:66:8c:c1:1d:cd:e0:e1:82:ad:85:
         af:87:78:31:8a:c5:03:c0:1a:73:73:3e:1b:62:f9:c2:14:0b:
         41:34:e1:8b:a7:7e:b3:de:df:12:00:9e:f0:63:19:37:fd:2f:
         c2:20:32:93:e2:ff:0f:5e:2b:56:12:ac:5c:19:bf:b7:3e:34:
         23:77:9f:5e:fe:37:2c:e6:37:0b:cd:aa:88:ce:6a:b4:2e:21:
         88:16:e6:80:18:b8:a5:b0:4a:24:5b:16:a0:56:39:08:6b:7b:
         a3:21:81:5a:2f:48:e3:27:c9:84:16:26:01:22:e6:f9:97:ea:
         31:23:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:54 2026 by rpki-client