Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c29d6934-402e-3750-80d0-f418f996a49e.roa
File:                     c29d6934-402e-3750-80d0-f418f996a49e.roa (raw, json)
Hash identifier:          bIkxUNCz95D+iyL6aVFs3N0b6Xqpt5OseuSSXDLIj2M=
Subject key identifier:   AA:8F:2F:80:22:62:08:B5:2A:B6:B8:53:BB:78:87:6B:74:9A:E6:C2
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584E8DEFA0BAEE1A9A844A20FF00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c29d6934-402e-3750-80d0-f418f996a49e.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     36511
IP address blocks:        2606:2480:9720::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a0:ba:ee:1a:9a:84:4a:20:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=01aeb19c-50a8-4a2f-bbf9-4b3d40594433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ec:86:33:96:1d:c7:d3:c5:d3:d6:54:5d:5a:
                    0a:16:fa:49:3e:1e:00:f8:a0:1d:3a:70:e8:18:47:
                    4a:47:bf:67:b0:6a:fa:62:9f:bf:77:f5:d8:b1:fd:
                    63:a3:71:7e:5e:d2:67:ad:c1:3b:54:5c:6d:c7:9b:
                    9b:9b:37:b8:dc:b7:7e:a2:e4:2a:e0:4d:0a:50:3a:
                    b8:91:15:b2:16:4e:af:86:c1:86:6a:3a:55:d0:d5:
                    1c:26:57:bd:33:02:15:50:a4:b9:4e:67:5a:14:82:
                    e4:67:18:50:e9:8c:07:08:d2:6c:3a:11:1b:02:9f:
                    31:e0:88:b8:b7:76:70:5f:67:13:de:42:eb:13:c3:
                    5e:49:fa:a6:a5:b6:3e:b5:12:b0:3c:47:25:be:b6:
                    d3:0a:a9:dd:1d:f9:40:8e:c2:8f:d8:e6:92:0b:2e:
                    be:54:e3:8e:85:6e:1a:fe:22:b0:0d:fe:e8:2a:c5:
                    27:37:7e:f7:4b:80:09:b3:e7:45:d4:60:9c:a9:99:
                    1e:19:43:8b:6e:a3:97:71:51:6b:3d:4e:68:95:0e:
                    9a:a5:a9:9f:fb:b0:78:a4:d7:b7:6e:87:b4:f9:e7:
                    c8:4b:73:f0:31:76:7c:a1:8d:98:ae:ec:9b:7f:5c:
                    93:3c:5b:6b:bf:4d:00:34:9e:f5:7f:c6:21:39:2a:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8F:2F:80:22:62:08:B5:2A:B6:B8:53:BB:78:87:6B:74:9A:E6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c29d6934-402e-3750-80d0-f418f996a49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2480:9720::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a4:48:60:b9:ac:c3:b9:a8:ea:a9:b3:6c:99:a0:8d:9d:82:
         c8:57:7e:82:23:0c:5a:d6:fa:2b:d9:ce:01:88:6a:08:62:16:
         24:59:b5:df:fb:b4:91:ec:44:bb:d5:44:b9:42:6f:d7:44:95:
         8b:17:78:93:33:68:ea:20:e8:f2:d2:3d:fc:bc:df:e5:c8:41:
         da:7a:ca:17:e7:8e:c7:f4:e4:7f:a3:08:93:da:57:5c:dd:ca:
         48:08:66:a9:f2:dd:90:8d:3e:93:ed:a9:d6:1b:4f:f7:bf:fa:
         57:b7:84:24:8e:1a:1e:cd:dd:dd:eb:0e:b3:de:38:6b:da:da:
         ef:9b:e3:31:2b:6d:40:e7:bc:d1:8d:0a:f0:e0:2d:e5:d9:86:
         11:9f:11:15:bd:06:b5:9e:24:62:63:5a:33:c0:8e:6a:ff:20:
         06:e8:89:b9:ac:25:1f:3a:10:49:16:e8:6b:1b:c8:8f:99:fd:
         bc:31:23:b2:a9:f0:69:15:f9:77:69:1f:55:db:49:79:23:7b:
         e8:da:ab:c8:55:41:26:60:b2:37:55:0b:c4:3e:95:92:80:9b:
         7d:1c:a1:55:9c:7c:c9:7e:2b:87:db:1b:3a:e5:9e:96:58:8a:
         25:2e:4a:c7:a6:90:1f:69:cd:a9:4a:ec:5a:c9:bb:55:cb:d7:
         ce:71:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:05 2026 by rpki-client