Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa
File:                     4903a6a5-2e05-34a2-b9df-6f26be762807.roa (raw, json)
Hash identifier:          ftEPcGRa/ip74M4/zxZDJxMlu42fW1QgcU0b1G7LaJ0=
Subject key identifier:   BB:72:52:E2:ED:FE:FC:A1:5F:1A:D2:9C:2A:C6:8D:B9:D8:75:E7:3A
Certificate issuer:       /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial:       010D0C9F4328584E6F3A20EE7D4CCF5C8B43FB80
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     18780
IP address blocks:        2607:7d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:20:ee:7d:4c:cf:5c:8b:43:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ee690655-57e9-42a1-9bff-10b80c4a9089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:80:5c:50:ff:6e:65:3a:64:68:1d:f4:ab:
                    63:6b:9a:f1:86:d6:cf:06:3d:bc:40:ab:fa:c9:db:
                    02:11:d9:9f:6c:1c:2f:f9:69:b3:d1:28:54:1c:86:
                    10:12:a5:ae:32:e6:8c:2f:61:f7:f4:31:ef:21:37:
                    02:fe:89:33:9f:75:18:ce:65:3b:80:c5:22:d3:1b:
                    5b:4e:87:a2:05:f3:00:e3:7c:f3:02:3a:c4:23:15:
                    58:64:16:e2:e7:14:62:d7:4b:92:d4:bc:0b:bf:01:
                    43:7f:7e:21:6d:f5:cd:c3:63:40:81:00:d0:e2:da:
                    99:36:2a:0c:e5:b1:19:0a:16:d0:1f:6d:26:83:db:
                    aa:5e:d9:1c:36:21:1c:51:46:b1:56:99:65:5a:97:
                    5d:9d:01:72:c0:f0:28:8e:ba:d4:37:26:6b:0c:39:
                    bf:4f:55:8c:d9:35:3d:03:b2:c2:54:d7:74:9d:7c:
                    c1:13:eb:72:12:49:bf:63:58:e4:54:f6:3f:2d:66:
                    2e:aa:45:71:a0:0d:99:25:c3:28:fa:0f:2b:7b:fd:
                    a0:e0:b8:0c:03:cd:60:a6:70:d6:9f:12:9a:55:8d:
                    e9:3d:67:b3:3c:50:01:04:08:a0:62:cc:f6:4f:39:
                    c2:8a:e5:b3:07:d3:43:94:54:fa:62:5e:d4:e3:d8:
                    4f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:72:52:E2:ED:FE:FC:A1:5F:1A:D2:9C:2A:C6:8D:B9:D8:75:E7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:49:a5:e4:90:33:78:1e:49:61:c2:c0:d4:61:da:84:77:79:
         9b:a1:be:97:e0:82:17:42:cc:5a:45:31:c6:52:be:c7:51:06:
         77:1e:81:11:c8:e3:97:55:aa:6d:71:04:8f:0d:5a:43:35:91:
         84:ff:5c:67:40:fe:d0:b5:90:50:b8:f3:81:4f:ff:dc:4a:87:
         61:e5:84:b6:6b:90:3e:7a:5a:32:42:10:14:fa:cf:30:c6:d9:
         90:53:ef:05:8e:5d:1b:ea:a4:f6:8d:8a:4f:87:d0:d3:1f:ef:
         16:16:8d:86:71:10:9d:8e:e2:45:21:00:8f:4c:17:b8:65:a1:
         79:81:3f:bc:90:77:53:2e:13:8d:04:d4:a8:af:c1:06:52:be:
         5c:9b:1d:5d:27:40:76:3c:a1:82:97:8a:b5:63:b2:09:24:12:
         fe:b7:07:16:2d:a3:d5:dc:92:3f:8a:5c:9e:0f:7b:91:5d:33:
         77:75:86:bd:9c:6f:04:bb:94:0d:75:9d:6b:4a:9d:55:2d:fb:
         55:e1:4c:d5:61:89:49:02:11:1d:bc:11:dc:48:a2:cb:8c:38:
         b2:7a:a1:b2:2c:d6:c8:b8:c5:7a:89:ab:bd:4d:c3:d9:66:9d:
         4a:79:1d:9c:e3:97:42:6f:47:d5:21:21:30:0a:ac:c2:d1:6a:
         06:d2:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:46 2026 by rpki-client