Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa
File:                     87423d02-64d1-33bf-971d-fc872853d448.roa (raw, json)
Hash identifier:          Mmqri6YaGZEj1kQG5CR6aJZgxjJsRml839af9kqUca8=
Subject key identifier:   BC:63:24:DB:0C:64:31:17:2D:F0:AE:E5:40:EF:69:9D:3F:F1:EA:07
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584E736A1A8D3105FD7E68036400
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:1a:8d:31:05:fd:7e:68:03:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=27146086-bdc7-4490-829d-821874fc4964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:98:9a:b8:09:45:8e:e7:44:24:e3:e4:d7:
                    d6:ef:ae:f2:d0:52:c8:b4:5c:7d:45:d5:23:3e:ff:
                    84:77:2b:8a:c7:cc:72:f1:6f:61:db:5e:e9:bf:e0:
                    c3:e8:0f:e3:84:41:0c:8f:d8:88:a7:75:3c:9f:ba:
                    6d:41:be:f4:53:59:e1:59:ab:60:0d:3c:b1:7c:6e:
                    ec:17:ae:f0:39:ed:06:16:10:a9:39:97:a4:81:ab:
                    01:11:30:c6:61:ad:e0:e8:40:5d:ad:dc:d8:68:db:
                    43:e3:7b:14:91:28:c5:29:2b:54:e4:ae:36:e7:b1:
                    b8:b1:57:12:06:76:6b:f3:6b:00:49:96:04:db:82:
                    55:e0:55:d0:3e:f7:66:e7:21:21:d4:05:f9:31:c2:
                    36:58:3e:18:6e:13:e2:c8:de:4e:ce:cd:de:14:31:
                    fe:c5:27:a0:ad:db:0c:09:9f:b9:48:7f:4b:b6:b2:
                    c1:a6:ea:df:43:02:f0:ff:cb:cd:b9:20:2a:a8:2e:
                    3f:0d:49:53:9e:4a:5a:9a:d7:da:e0:9b:e8:47:8d:
                    f8:40:a1:02:46:ca:57:eb:31:2a:27:8c:59:dc:56:
                    28:c4:60:2e:ef:97:58:82:c2:31:3f:62:40:ef:07:
                    5d:a4:d5:af:d2:a5:63:af:78:d6:5d:aa:eb:e0:4f:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:63:24:DB:0C:64:31:17:2D:F0:AE:E5:40:EF:69:9D:3F:F1:EA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:34:e8:e9:79:0c:05:11:1e:f0:31:48:d5:a6:e4:d0:e6:44:
         0d:58:1d:3f:25:7c:df:b4:52:f4:8b:b5:3e:79:35:58:01:b9:
         14:f0:5f:4b:7a:af:be:b8:3a:8d:ab:3c:b1:9b:30:fb:5f:cb:
         21:a8:30:0f:b7:e7:d6:9b:84:f4:c4:bd:5a:18:da:7a:f5:6e:
         7a:22:0e:b1:74:29:f1:17:14:8a:2d:7b:3e:db:ac:1e:26:e4:
         b3:e3:2a:ba:da:18:ce:ca:8f:dd:02:42:90:4f:ea:16:b5:c3:
         55:c9:a2:63:ed:07:09:d8:4e:66:e3:df:70:93:e4:ce:3f:d8:
         b2:ac:64:b4:0c:98:51:eb:a4:55:4d:93:3c:a2:97:99:cb:b4:
         f7:95:b5:0a:b6:df:3a:ad:e2:3b:31:b1:ea:fe:50:99:5d:c2:
         15:52:cf:86:aa:0d:1f:6c:ee:78:e5:d8:5c:1a:20:aa:28:e4:
         7a:cd:7b:01:f9:fa:68:ce:d9:6c:0a:40:7d:5b:0f:c0:d2:66:
         62:86:45:fd:01:75:2a:04:55:eb:d5:23:5a:f4:96:3f:a6:59:
         b8:69:12:3b:ad:69:56:57:1b:7b:db:7f:40:a5:66:6e:81:2d:
         2c:d7:1c:e7:9f:f1:af:61:28:e8:b4:15:f8:27:e3:db:2e:ae:
         e8:95:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:22:00 2026 by rpki-client