Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/1892ad60-4d6d-369f-8a38-b161abed8638.roa
File:                     1892ad60-4d6d-369f-8a38-b161abed8638.roa (raw, json)
Hash identifier:          i8Y/phfOY+Y87+dSjRqGF7tDJuRa0TswiX3jX0TGqFU=
Subject key identifier:   6C:3D:2D:AD:34:1C:34:A1:C4:74:39:E6:84:A3:CB:B4:05:95:1F:89
Certificate issuer:       /CN=df247d2f-5f6f-414c-b8c9-181359f105bf
Certificate serial:       010D0C9F4328584E5E7A07787A35D7732BAEC7A0
Authority key identifier: 03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/1892ad60-4d6d-369f-8a38-b161abed8638.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     13855
IP address blocks:        2607:f070::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:07:78:7a:35:d7:73:2b:ae:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df247d2f-5f6f-414c-b8c9-181359f105bf
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=2a4cc237-86bc-4226-b9fd-0de3d550ce73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:dc:70:c6:e2:cf:f7:16:c4:e5:48:25:47:
                    b4:15:81:bc:65:eb:f5:ed:01:e9:db:6b:ce:22:49:
                    0b:c7:02:0d:2e:da:ad:b8:fb:79:ab:86:77:6e:60:
                    c6:8b:0a:5c:06:26:51:95:4d:c0:ef:3c:07:73:af:
                    03:eb:86:a5:76:18:fe:d7:bc:bf:e1:ef:eb:92:70:
                    f6:48:97:c8:f2:91:72:a4:5b:bf:bb:8a:d2:34:27:
                    ea:e1:65:9e:4c:eb:80:e2:0e:7b:dc:f5:7e:04:e2:
                    a0:f3:b0:c5:f8:bd:84:0b:6e:cb:b9:84:a4:eb:82:
                    5d:6e:72:c7:04:1d:71:f1:6b:df:37:2c:85:13:07:
                    57:ce:fe:be:d4:8f:3e:fa:47:a3:8f:61:6d:e9:22:
                    29:af:21:1b:31:51:bd:02:c0:27:fe:25:ab:96:ad:
                    e8:4d:17:a5:fc:7c:e3:95:9e:d5:41:19:c5:10:f7:
                    46:4b:86:49:82:a6:7e:ac:98:da:c7:31:22:c8:ff:
                    65:8d:d5:02:3f:19:c6:13:65:ba:04:fa:08:20:d9:
                    80:ea:0b:05:0b:b0:f6:ce:da:ec:ea:2a:74:21:23:
                    96:a3:9e:09:eb:c7:e2:29:cc:88:d8:01:91:34:cf:
                    45:96:a6:d0:a0:f3:48:19:69:53:03:03:75:b1:eb:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3D:2D:AD:34:1C:34:A1:C4:74:39:E6:84:A3:CB:B4:05:95:1F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/1892ad60-4d6d-369f-8a38-b161abed8638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl

            X509v3 Authority Key Identifier:
                keyid:03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f070::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:89:1a:15:ce:c5:77:50:bf:69:dd:2a:19:3e:55:3f:43:
         fc:46:48:bb:1f:80:8b:16:31:aa:b9:84:f1:03:84:ef:c7:f8:
         9e:41:a0:c6:bb:0e:86:9f:db:a1:97:81:90:6c:33:a3:75:62:
         80:8d:cd:2a:8f:ad:06:f7:41:65:51:de:5b:4e:e9:fa:db:d9:
         22:dc:71:cd:7e:4c:2d:d0:a0:7d:6e:78:35:e9:bc:17:e4:ae:
         30:68:d8:fb:19:09:e0:c5:6f:68:61:0c:8a:c9:68:d3:c1:de:
         72:81:26:b1:a0:f4:72:e6:ff:17:0d:5d:1b:09:98:51:3c:74:
         82:c4:b7:a2:84:5b:cb:24:ac:e7:e1:62:67:6b:94:47:b7:da:
         61:32:6d:ee:18:ea:65:cd:6c:8a:bf:d2:51:d5:fa:b3:1c:30:
         34:b3:87:8d:ca:67:c0:08:f8:50:c4:16:95:5c:3a:0f:7e:9c:
         60:75:a1:79:a8:cf:e3:12:bf:8f:ef:ae:c6:3f:98:6b:df:2e:
         3f:02:2f:4b:1f:af:61:a9:31:88:cc:75:67:83:b2:25:34:61:
         ec:fc:62:9e:69:2a:38:cb:60:a4:d3:6c:10:4f:bf:34:b6:97:
         0d:9c:19:ea:d2:c1:ec:aa:0c:fd:21:00:e5:50:a0:ae:18:e0:
         03:ee:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:26 2026 by rpki-client