Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
File:                     2523a460-454b-387d-8a94-5c40f8f7d030.roa (raw, json)
Hash identifier:          N3cOUZ+SJxto1nnsm5sfuZsoc9Dgjf/M9hichQXqxYE=
Subject key identifier:   FC:16:86:4F:62:26:4E:B3:6C:A5:A1:03:C8:5F:7B:60:30:F9:EA:A1
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584E842A3AEDAC760BD4678C8640
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     29834
IP address blocks:        2620:1f7:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:3a:ed:ac:76:0b:d4:67:8c:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=9f0032a6-6376-48b2-a3b7-c6dbfed2fe15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:89:2f:e7:19:01:89:23:7b:4f:56:d5:ed:85:
                    33:c9:6e:2e:69:1f:bd:d9:73:9d:08:b9:23:1b:72:
                    27:b5:b7:7f:2c:6b:4a:aa:ed:3d:d6:5e:5a:8b:d3:
                    ae:7e:1b:19:2d:ca:8f:93:9f:4f:62:7b:ae:c9:36:
                    97:f6:9b:26:24:50:ae:a5:21:df:94:99:c1:0e:49:
                    ff:45:1a:fc:97:93:3c:57:5b:35:a2:32:d2:6c:cb:
                    6e:15:de:2f:d0:77:30:3a:2b:96:51:8f:38:81:fa:
                    c6:81:bf:53:8a:c4:b7:bc:bf:bd:2f:90:c0:4e:5b:
                    55:8f:2c:a1:6e:d1:69:cf:63:a6:6b:74:db:7b:8d:
                    4d:55:4d:46:79:d1:34:2d:97:80:b6:67:53:ea:7a:
                    85:89:28:99:bc:16:62:c0:65:ed:35:f8:7c:ca:1b:
                    94:4c:13:a9:4c:a1:ef:92:98:e1:b3:1d:39:5e:b1:
                    5a:a6:c2:b9:bc:12:b4:29:5f:b2:7c:86:2d:64:9f:
                    7f:e3:37:e3:a6:e5:08:79:77:a7:8d:3f:a9:5c:4d:
                    b6:b4:82:d3:a2:aa:fd:4b:af:04:9f:cd:5c:d4:e4:
                    43:28:05:30:b0:f4:20:92:f2:b6:3c:52:dc:9d:d2:
                    f5:60:b7:a5:ed:64:11:d9:ef:3b:aa:98:25:0d:17:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:16:86:4F:62:26:4E:B3:6C:A5:A1:03:C8:5F:7B:60:30:F9:EA:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:1f:89:ed:bd:92:0f:92:b2:e9:a1:56:e0:7d:64:dc:9b:
         bf:c8:d2:8d:3a:2f:82:ea:84:df:cc:80:bd:f7:9a:a5:6b:54:
         28:ba:25:36:66:e1:ea:40:d2:b5:6a:dc:df:17:90:9c:a4:30:
         5e:bf:0a:41:d1:2f:4b:7d:58:b5:bf:ec:74:6a:98:df:03:c1:
         aa:5d:57:2c:ac:d0:c6:2c:93:ab:72:ab:78:7f:6c:25:a0:27:
         e6:b3:d6:90:b4:53:ce:4e:ec:10:53:2d:db:66:ef:61:2c:e7:
         81:54:e7:12:1d:0c:af:84:9d:b3:d5:8b:0b:01:05:0f:1b:9a:
         0a:80:c8:03:b8:cd:03:6e:26:4d:af:20:de:b3:42:22:9e:0d:
         8f:9a:d7:de:d5:08:04:19:3a:37:21:84:b3:69:39:9b:63:36:
         6e:ad:71:72:a8:81:02:ab:17:08:e2:74:17:0b:43:c0:4f:ab:
         4e:4b:c4:55:8a:9d:13:15:95:d8:e4:29:e4:2c:3b:8b:86:39:
         97:d1:a3:5c:10:67:1b:b9:91:cb:32:1f:2e:f6:28:ae:5c:41:
         1b:2b:02:8f:98:ba:8f:1c:32:14:b1:b9:93:76:b2:37:65:7d:
         42:cf:d0:e4:8a:b9:08:f5:2e:86:32:66:1e:a1:f0:d5:1f:c9:
         4b:ce:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:05:30 2026 by rpki-client