Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d77e0270-a05a-31f2-88ba-81d631ab4e3b.roa
File:                     d77e0270-a05a-31f2-88ba-81d631ab4e3b.roa (raw, json)
Hash identifier:          ImuXC8rYHPnG0oOKhpzSMf0RosVKyCQQ2UFx7yy7NWo=
Subject key identifier:   AC:DC:CA:C7:F8:A4:FE:2A:87:60:90:E9:94:33:2F:2A:2B:68:49:AF
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E94EA84CD28B3130A53643240
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d77e0270-a05a-31f2-88ba-81d631ab4e3b.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     63023
IP address blocks:        2604:86c0:f300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:84:cd:28:b3:13:0a:53:64:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=0cd5b534-c1bc-481a-b142-fa41763e0b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:08:83:60:ae:9e:e8:8e:87:31:01:2b:32:a2:
                    46:f8:46:f0:cf:6e:ce:8f:f2:9e:0d:f3:06:33:3c:
                    21:96:80:94:0c:cb:9c:a4:5e:da:9b:98:4b:7d:1d:
                    53:ae:56:ea:fb:c3:f7:7b:b9:ec:9a:9c:72:fd:26:
                    42:7c:76:8f:d4:c8:e4:aa:05:9d:76:13:ca:92:18:
                    f6:09:5a:02:b5:84:2f:86:3f:db:82:98:ac:0b:a8:
                    27:5a:d9:8a:a9:57:cf:15:68:61:01:6f:d7:aa:92:
                    c3:75:b2:23:51:29:a5:0c:64:d1:f6:0a:5d:d8:e8:
                    d7:39:2c:6e:11:a7:6d:d5:71:43:84:85:49:15:30:
                    f1:6b:19:9b:37:b5:8f:44:5c:af:e5:e5:57:43:fd:
                    6b:e8:cd:1f:86:b1:08:31:62:87:a5:a9:3b:46:b0:
                    b9:af:ef:96:eb:ae:69:20:23:d7:fc:b8:ed:be:9b:
                    62:14:9b:1d:16:6b:07:17:fb:29:8c:f7:c7:bb:7d:
                    b2:34:b6:d1:9b:69:8e:67:de:54:67:dd:96:3d:73:
                    ff:5c:ad:43:8c:00:d5:23:fa:1c:59:7e:35:26:92:
                    7a:ce:87:ac:fe:ef:1c:24:7a:35:eb:ed:c6:69:48:
                    77:b3:2e:43:8d:02:76:bf:ce:45:93:03:73:a3:18:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DC:CA:C7:F8:A4:FE:2A:87:60:90:E9:94:33:2F:2A:2B:68:49:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d77e0270-a05a-31f2-88ba-81d631ab4e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:f300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:48:5d:c5:d1:d4:47:d1:a9:01:16:c6:45:0e:da:87:0e:e2:
         29:d4:d7:9e:66:9b:2f:fe:17:41:d6:0c:8b:10:6c:68:c0:6a:
         48:63:e9:df:e8:df:39:eb:63:d4:12:5e:3b:38:be:96:15:c1:
         b5:27:b6:db:8f:ae:f2:e0:1d:16:04:e3:0c:5f:f9:c9:55:1e:
         9a:bf:73:0b:1f:70:9b:7b:b2:ce:74:cd:dd:46:c3:34:a7:c9:
         58:5d:ef:c1:7c:f1:b9:24:a1:62:17:24:20:c3:50:bc:0e:1e:
         b7:17:15:b2:86:8f:9e:53:1e:56:cf:cf:53:3b:2f:9e:63:79:
         e2:dc:c2:fd:06:0a:41:9b:38:00:38:54:28:21:e2:9b:97:4f:
         e2:3c:ed:5b:0e:a2:5d:0c:51:83:3a:ff:3a:27:30:70:10:56:
         0a:b8:34:dc:b0:e9:bf:6f:34:8e:83:45:19:6a:52:21:88:44:
         ef:11:32:69:6a:10:00:9b:4c:c3:2c:aa:cd:22:25:9d:c6:4a:
         ef:cc:50:c5:f0:7d:d0:01:94:ac:67:c3:3a:39:a9:e1:9e:38:
         d8:28:34:f9:b0:e2:af:db:67:1f:47:2a:fd:0d:44:37:59:f3:
         c0:0d:f9:65:93:c5:11:e6:5f:3f:d7:16:05:6d:1c:38:a3:71:
         bc:aa:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:12 2026 by rpki-client