Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa
File:                     5c2617d4-b863-3aea-89a8-20002822ac28.roa (raw, json)
Hash identifier:          2ingjKijMRagZDaxIMCFXQCsUCuKz2oHB4U7wWPayvc=
Subject key identifier:   53:F6:1C:71:0D:C3:3E:AC:AC:A4:4D:A4:33:03:F9:54:C6:63:6F:EA
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584E482488F28F662B4BF312AB00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     18914
IP address blocks:        2607:1cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:88:f2:8f:66:2b:4b:f3:12:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=7258a86a-caa0-4595-a7f7-8af1cd90579e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:0b:f4:82:7c:4d:2d:27:30:48:69:f8:c4:
                    27:e4:b8:cb:48:d7:8e:fe:ce:c8:c5:3b:56:55:73:
                    f2:8d:53:e2:40:3c:89:0b:27:08:d1:8e:04:8a:4d:
                    f9:65:5f:80:8e:26:aa:8f:0f:04:69:1e:15:bf:d7:
                    9c:eb:77:6e:0a:00:2f:76:20:b0:90:53:e0:bb:5c:
                    9a:79:1c:0e:68:2b:29:ea:ac:f8:cb:be:a4:fe:25:
                    99:bb:56:97:c5:dd:9a:3d:9b:59:41:80:db:c9:ef:
                    31:60:9f:9b:2e:11:75:8c:88:0f:84:86:bc:40:17:
                    45:7c:9d:8d:e6:e5:a8:23:4d:e6:a6:30:71:66:91:
                    56:a9:03:ef:66:43:d8:29:74:b8:3e:50:33:ee:44:
                    89:ba:df:b0:ab:84:82:fe:fc:5f:da:e0:3a:06:a7:
                    d9:2a:8a:58:c1:e0:4f:67:02:f8:e3:4f:65:97:f1:
                    cb:17:c2:b4:59:08:bf:8f:4a:df:bc:27:96:2a:96:
                    80:5d:c5:68:9a:32:f1:59:e8:49:8c:f4:be:95:60:
                    03:4f:21:cf:bf:b5:06:26:9f:cc:bc:58:39:8f:7c:
                    99:a7:9a:1b:3d:de:95:b4:89:08:a9:e1:83:57:15:
                    6c:05:d5:4c:0f:e8:49:4a:83:6c:b6:67:28:86:26:
                    28:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:1C:71:0D:C3:3E:AC:AC:A4:4D:A4:33:03:F9:54:C6:63:6F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:42:73:42:98:96:6e:52:f3:f0:ed:8b:ff:fe:93:41:dc:3a:
         15:8e:a9:d7:8a:4e:9a:0f:fd:83:03:9b:75:ce:98:46:46:71:
         e1:be:26:63:d6:f9:14:18:ee:d1:17:99:8f:09:47:b9:8c:34:
         f3:ec:7d:37:70:0f:2c:ff:b6:3f:7f:67:de:b3:26:a6:05:3c:
         71:2c:ea:a0:04:13:31:91:e7:9b:76:81:95:25:82:fe:e8:ce:
         0f:9f:e2:e2:60:45:fe:a0:e6:c9:8e:2a:35:01:52:3c:e8:10:
         41:72:56:a6:10:f1:7e:6f:7f:c8:95:96:15:72:fb:86:8f:90:
         64:f8:36:bd:9b:19:ad:2f:65:4f:bf:ea:a4:3b:43:da:2b:99:
         c3:aa:4f:ef:1d:87:61:ec:ab:78:aa:94:ae:ba:8e:6b:dc:c8:
         1d:a7:48:fd:16:b2:ae:98:04:5f:a7:79:39:7c:33:04:e3:b3:
         3c:7a:e2:f8:95:e4:9a:c6:aa:02:98:b7:df:bc:3c:d0:9a:45:
         49:ca:96:9f:63:fc:d6:5d:b4:3a:03:e7:e5:d7:94:2b:dd:af:
         7a:4a:4b:40:35:4b:e2:47:8b:52:d4:96:38:94:0e:e1:d4:90:
         c8:24:79:68:59:ae:26:96:9d:8f:4b:37:6b:8e:a5:92:14:96:
         58:20:2b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:15 2026 by rpki-client