Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa
File:                     821ceb12-8191-30c5-81e1-ac603feb60b8.roa (raw, json)
Hash identifier:          ri7Ynf52fPZibPZv0mQl2vwk/KfqTPeD9t8oOpKjRR8=
Subject key identifier:   7B:81:12:6F:C4:A2:E7:6A:EF:36:1E:4F:99:EE:F9:41:3E:15:2A:C8
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584E7FFA3253093BB283A314CA80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     32780
IP address blocks:        2606:2e00:8007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:32:53:09:3b:b2:83:a3:14:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=aa377d8e-e16c-4090-86d0-7b84e1e6abea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:b6:21:b4:5c:51:c0:0d:c9:42:0b:af:47:
                    8e:03:2b:e6:f4:65:73:63:ea:c7:92:bb:07:83:ee:
                    f1:9f:26:d3:5d:1f:4b:44:e6:72:37:f8:04:73:e3:
                    80:2b:03:8b:3b:89:86:5b:67:3d:7f:70:1b:51:ee:
                    5c:f1:69:c9:33:3b:f1:3b:d5:f3:48:62:52:80:7e:
                    fe:d2:7b:a9:25:8f:d8:2a:14:25:df:de:1c:d9:35:
                    c1:c4:8d:06:66:17:c5:bb:9f:7c:c7:ff:ae:65:33:
                    28:ae:be:7e:0c:60:83:b1:7d:6b:dc:50:97:fc:c5:
                    a4:c5:4f:5f:e0:3c:32:bc:ab:4c:5b:dc:50:4f:21:
                    94:25:c6:fd:77:6b:9a:dc:15:ee:3c:fe:d2:f4:7f:
                    92:df:da:3a:38:1a:86:15:6d:96:0d:db:95:3f:37:
                    44:01:c5:b9:9e:4d:b9:fc:1b:11:31:d1:4d:9f:7e:
                    9f:8e:4a:50:2f:2f:e4:11:fe:93:10:f6:59:6c:98:
                    74:87:6e:8d:05:67:1b:d5:19:b0:fc:7e:0c:47:99:
                    03:21:68:b6:b6:8c:13:9e:ed:d9:a6:78:68:aa:4c:
                    52:e5:fe:ee:9c:bd:7f:0c:13:3c:64:b4:6d:bf:3b:
                    32:92:35:aa:6d:7e:e2:15:08:ba:12:6e:fd:72:10:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:12:6F:C4:A2:E7:6A:EF:36:1E:4F:99:EE:F9:41:3E:15:2A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2e00:8007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:3c:be:a0:77:60:2e:af:c1:04:5b:bd:7f:77:4e:dd:c5:
         fc:73:3a:be:d7:d2:57:4b:69:2c:fd:d9:51:dc:79:65:a6:b3:
         09:a9:e1:79:3a:b6:fb:5b:b4:c7:cb:eb:0a:34:61:f2:f0:ec:
         9c:4c:b6:e9:02:68:d6:95:7d:d9:3c:1e:cb:2a:38:de:bb:8e:
         a3:0f:29:85:7f:71:d6:d4:07:f3:4f:9a:25:24:b8:56:2d:26:
         c4:c1:aa:ec:73:57:0b:84:8f:c7:99:54:73:4b:cd:41:6d:de:
         8c:df:7c:65:2c:cb:9c:68:de:75:9d:09:90:bb:92:2b:c7:46:
         de:f2:9d:d5:eb:8c:34:3e:25:d2:1d:07:1f:b4:01:f2:76:5b:
         fc:58:81:06:fc:0e:7e:f6:b9:b4:2d:39:41:8c:94:74:99:69:
         52:72:d2:d5:5a:b1:97:8b:65:db:b3:95:77:a7:64:b6:e2:f4:
         1d:73:7c:ab:60:b7:26:b7:e7:0f:b3:c7:b4:6b:43:55:0c:f1:
         43:e2:dc:ac:c0:b5:0b:88:7a:97:3f:8a:c9:06:f1:29:b5:ff:
         2d:4d:34:a4:65:bb:37:1b:1e:23:43:fe:d2:31:e4:3e:88:e8:
         d2:37:dd:67:38:17:98:85:90:10:c0:83:11:4e:64:95:30:13:
         9b:1d:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:58 2026 by rpki-client