Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/2c71b6c5-ea13-3023-aa0d-cdfede577184.roa
File:                     2c71b6c5-ea13-3023-aa0d-cdfede577184.roa (raw, json)
Hash identifier:          G0+YRmU/H6x9iM5Em1NPqlZCazqWrAcwp2jWnqyaGl4=
Subject key identifier:   11:AE:65:22:5E:90:96:B3:E1:08:E5:53:F8:11:94:AC:D9:A5:57:AB
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E709F7297AA747D32A88C7800
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/2c71b6c5-ea13-3023-aa0d-cdfede577184.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     14618
IP address blocks:        2607:dbc0:800::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:72:97:aa:74:7d:32:a8:8c:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=f1e74622-b75f-4808-b76d-2585603ecad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:a6:5a:41:95:03:4c:c2:8f:5a:e0:3e:60:
                    20:cd:03:1a:58:0d:93:8a:db:88:ee:73:08:5d:df:
                    bd:fd:6a:97:50:83:55:12:96:21:74:c5:b5:e6:22:
                    52:9a:f0:20:8f:c7:e0:77:82:5c:19:b2:b4:bb:2e:
                    07:58:1f:60:d0:6c:fa:5f:b6:d3:36:a4:0b:d6:c1:
                    00:2e:83:38:26:9d:c4:00:5b:c0:04:f1:9b:b3:d8:
                    43:04:7f:7a:91:27:38:7c:0c:11:64:ef:38:38:1e:
                    e0:f6:3f:6c:63:cc:c0:5a:ac:b9:a9:d4:0b:2b:e9:
                    72:4f:b9:18:c8:73:32:1a:b9:08:1c:06:c6:ad:7b:
                    03:15:cc:b5:23:b5:4c:56:3a:96:90:d7:93:0d:2d:
                    d2:22:af:3d:16:29:f5:70:b7:22:eb:9a:ac:ad:23:
                    16:50:32:8f:2a:a5:d5:ec:b7:6b:05:3f:5c:12:c3:
                    d3:b3:f7:a2:32:cf:95:2b:2d:50:16:6e:b2:ba:9c:
                    c6:7e:7a:c6:dd:de:40:ee:09:8e:a4:2f:99:8d:05:
                    11:42:32:ae:37:8c:2a:ac:96:7e:84:83:fb:dd:34:
                    44:35:70:8a:7d:b9:0b:6b:27:6e:53:a6:a0:8f:48:
                    bd:28:dd:bc:f1:bb:1c:02:87:2a:24:97:9e:45:76:
                    42:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AE:65:22:5E:90:96:B3:E1:08:E5:53:F8:11:94:AC:D9:A5:57:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/2c71b6c5-ea13-3023-aa0d-cdfede577184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:67:62:36:a0:25:02:be:82:48:bd:e8:2d:ba:db:f3:39:71:
         e1:49:5a:53:00:f8:d9:f9:af:71:b6:e1:f2:04:f3:9f:7e:e6:
         9c:34:58:9f:96:2e:91:93:38:90:7e:dc:ce:21:c9:aa:04:fd:
         d0:9c:43:7f:07:be:68:1a:d2:d0:57:e2:a8:c6:9b:7a:3e:3e:
         60:d9:14:72:21:1a:70:d6:bc:06:e9:a5:56:00:c8:ae:c0:14:
         cf:13:03:c3:b9:0a:88:35:51:a4:03:06:c2:52:ec:f0:00:62:
         b2:31:1d:b1:02:65:f7:a4:9e:3e:31:44:eb:30:fb:31:c9:72:
         c1:42:f8:e1:9a:bd:e0:c0:eb:a8:ca:42:b5:ee:25:11:41:59:
         17:a3:2a:fa:41:08:33:43:9e:cd:99:cf:eb:6f:7d:65:f0:dc:
         5c:31:f8:71:98:c5:d0:91:48:15:9a:5b:e5:d8:e5:97:9c:b6:
         d2:30:77:c0:76:2d:3e:05:73:a6:92:09:57:77:ba:21:a7:2b:
         87:b8:78:de:8f:c0:22:2f:68:65:46:bf:04:20:81:06:64:e0:
         e6:5d:8a:1d:6a:9b:c0:f4:55:ad:b6:be:2b:b4:5f:9e:9c:47:
         31:18:d2:70:2d:a0:07:bc:c2:fb:c0:bc:f1:eb:39:4c:33:38:
         79:62:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:47 2026 by rpki-client