Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/14e46f05-8d6e-3267-aa28-0f6512f4f3cb.roa
File:                     14e46f05-8d6e-3267-aa28-0f6512f4f3cb.roa (raw, json)
Hash identifier:          SbIfgA0kafPD28un09sj0Ms1hzp1Hp3SauvPkd7qFg8=
Subject key identifier:   DC:18:D6:76:AB:FA:5A:8F:77:6A:1B:6F:43:A1:19:06:52:77:A4:9E
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584E6F3A31E879087E757D360B00
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/14e46f05-8d6e-3267-aa28-0f6512f4f3cb.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     214611
IP address blocks:        2607:1c0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:31:e8:79:08:7e:75:7d:36:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=972f7a49-fdf9-4379-b94b-5f19cd2faf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:cf:d0:d3:c0:43:5d:0a:82:de:17:d8:9a:
                    c5:f5:ca:c1:5b:ec:f7:9c:46:8b:07:f9:bd:60:1a:
                    c8:37:c7:8b:03:4c:07:93:5d:db:88:a5:e4:bc:a1:
                    8c:80:2a:b8:12:80:49:08:0d:bc:c9:bb:93:67:e9:
                    1f:e9:66:38:9e:7c:52:ec:0a:a1:16:02:04:d5:ee:
                    c1:1d:15:72:31:e6:6d:d7:14:a2:a3:e9:43:e9:a0:
                    b8:f8:0d:39:87:e8:91:c6:86:12:ec:9b:af:4a:db:
                    d6:25:33:55:09:3f:59:4b:e6:6f:7b:e1:09:d8:59:
                    cd:85:34:77:ad:f5:ad:57:a6:b8:0d:42:be:0b:65:
                    7d:c8:ef:e7:f9:85:a7:fe:14:8d:66:9b:92:6d:7e:
                    ea:b3:22:9f:12:36:28:59:9c:56:25:65:89:14:77:
                    1d:4c:f8:32:95:02:6a:88:28:91:c8:2e:87:a2:ff:
                    96:0a:c8:2d:c2:24:b4:cb:32:23:24:cc:29:0b:9e:
                    8e:30:f5:95:60:16:1c:3e:0a:4b:32:1a:e6:24:79:
                    24:9e:79:42:e1:4f:9e:87:75:7c:e7:6f:97:75:79:
                    49:ff:59:c8:40:a5:b6:06:57:23:41:5a:40:28:bd:
                    1f:70:9c:d1:bc:8f:af:5b:ff:41:54:09:6c:9d:05:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:18:D6:76:AB:FA:5A:8F:77:6A:1B:6F:43:A1:19:06:52:77:A4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/14e46f05-8d6e-3267-aa28-0f6512f4f3cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:06:79:6e:93:75:01:e3:b9:f2:28:cb:63:97:4b:77:27:7b:
         f4:a6:64:e0:9f:19:78:41:ef:b6:8d:ba:92:3b:47:cc:f0:cc:
         4f:74:8a:bc:ed:1f:52:2b:5b:a4:a1:0e:e0:c5:ab:0f:d5:53:
         42:4b:3d:6f:fd:20:09:9a:09:bf:8a:d7:a1:07:2f:b7:24:24:
         68:50:63:3e:c1:71:c9:b9:b5:01:c4:3b:1c:9e:78:c0:8e:ba:
         d6:ba:45:10:9c:f3:d8:b2:23:cf:2d:93:6c:ff:ae:10:ac:fd:
         bf:61:a3:74:0b:e7:2c:a6:3a:7b:de:83:6f:81:28:fe:a7:9f:
         db:d6:6e:15:b3:10:14:a0:b5:11:1a:e7:bc:61:3f:de:4e:88:
         f0:f8:64:f6:d5:ce:44:93:d6:cc:35:6c:18:c9:dd:ce:04:2f:
         80:09:86:1b:d1:85:ad:74:aa:fa:73:52:08:96:4d:c0:3a:4a:
         28:98:7d:ac:ba:2a:91:52:4f:9c:81:07:44:74:6c:5a:6b:10:
         09:db:a3:0d:1d:f0:45:a4:04:cd:80:b7:7c:67:12:3b:b6:15:
         21:fe:09:5c:d4:53:cb:25:a4:25:5d:e7:f0:1f:b7:7e:08:fe:
         08:6c:83:6f:5e:f0:28:4b:33:ab:96:ef:52:7c:f4:e0:ed:91:
         ef:1a:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:39:07 2026 by rpki-client