Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa
File:                     ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa (raw, json)
Hash identifier:          sjnV4/lrxRZVQSf0YRj4dBZZAV50wJCoo0FCtNHi/Bo=
Subject key identifier:   4F:25:9D:14:5B:0E:10:32:1D:61:73:55:1C:B8:E9:CC:27:85:26:60
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584E35FF1057D20F817C12322CC0
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     15418
IP address blocks:        2607:f1c0:fe::/47 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:10:57:d2:0f:81:7c:12:32:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f38ce7a0-e1b2-4035-ac48-0671257a509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:e0:03:39:b4:c8:2a:15:28:1f:d9:29:e2:
                    da:ad:dc:16:48:3d:1b:e5:69:dd:15:cd:a2:76:3e:
                    fc:9d:97:c7:7a:75:b7:68:58:a5:fe:0f:6d:04:69:
                    ce:29:b9:84:71:a5:0e:4b:0c:88:5e:b3:2e:d3:85:
                    40:f8:1f:48:3f:1b:b5:4b:26:c6:a7:6d:ba:7f:61:
                    b4:7a:3f:97:a8:96:fe:88:0e:5c:ec:a9:9b:78:15:
                    6a:5d:d5:8a:ab:39:f8:7b:77:f7:dd:1f:a1:32:99:
                    bf:06:07:ad:40:9a:a3:a3:26:77:62:21:33:d4:fa:
                    60:cb:6b:e1:c4:60:fd:c5:b8:0b:9b:19:46:0a:1e:
                    82:73:7a:9f:0b:f9:a8:8f:c2:f2:2e:28:a3:3a:dc:
                    e1:54:a2:cd:83:7d:b5:10:14:34:a1:f7:39:5c:8a:
                    ed:53:91:c3:66:db:56:3a:28:6c:de:41:e4:c0:41:
                    a3:29:c8:49:40:e9:ee:25:13:99:f0:69:de:02:45:
                    1a:68:e5:d2:43:82:a5:3e:44:0a:fe:d1:2d:ef:55:
                    7e:78:25:6f:74:66:e7:c2:0f:9c:ea:35:93:1a:da:
                    f0:bb:42:8a:b6:8b:ff:eb:38:fd:8e:b8:84:4a:ff:
                    ae:94:8a:12:2c:eb:d3:c5:4a:e7:45:00:9b:a4:e8:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:25:9D:14:5B:0E:10:32:1D:61:73:55:1C:B8:E9:CC:27:85:26:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f1c0:fe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:e3:f5:ef:95:6b:87:9d:86:e8:17:e0:46:ee:01:f6:54:
         3b:36:94:65:0b:bd:f1:d1:59:d9:87:ed:13:54:bc:a4:17:3a:
         89:3b:bf:aa:7a:08:a7:5f:7a:38:f9:71:8e:07:ab:51:ca:b2:
         fe:df:b0:60:61:70:ca:7d:cf:b0:43:f2:07:05:71:99:c6:ac:
         a5:70:55:96:1f:7f:04:72:d0:98:b7:82:b8:29:cf:8d:d6:d9:
         05:91:e1:6f:81:76:d9:4c:d9:ad:f3:8e:db:51:9e:a4:d7:4b:
         7b:3e:20:26:18:51:a3:9a:d3:96:dc:e6:49:69:bd:e5:11:79:
         ee:0d:bf:72:8a:86:3f:fe:2b:6f:59:b1:52:99:cd:4b:f1:39:
         c3:8c:dc:69:05:1e:e3:48:fe:3d:39:85:1a:f7:d6:01:49:cd:
         de:2a:45:44:1f:25:af:f8:a1:27:2b:85:9e:d3:da:c1:83:69:
         6d:4b:aa:d4:e1:40:cf:86:44:93:b1:88:cf:a7:35:cf:4e:f0:
         d1:61:7c:60:4c:58:5f:98:e4:7c:60:d6:d5:e8:54:3e:4c:b6:
         63:3d:67:a0:db:00:ba:78:db:bd:04:fb:9f:f2:cb:f4:bd:fd:
         79:58:f5:af:b5:aa:35:32:2b:bc:da:cb:a0:25:09:4a:ce:ea:
         65:57:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:40 2026 by rpki-client