Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/148a6272-1a42-367e-a934-0b576a07d74d.roa
File:                     148a6272-1a42-367e-a934-0b576a07d74d.roa (raw, json)
Hash identifier:          jz/Q0T1WKtV5E4V9eX7hf6wuACO0Gdzyz3JC/lbA/IY=
Subject key identifier:   15:6F:60:DA:A2:D8:CC:91:32:50:B3:F3:EA:7B:41:59:71:A5:86:C2
Certificate issuer:       /CN=1ff41215-3026-434d-963c-327afdcf5cbe
Certificate serial:       010D0C9F4328584E7E94EAC0FC4F99F2553645C0
Authority key identifier: AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/148a6272-1a42-367e-a934-0b576a07d74d.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     40450
IP address blocks:        2607:d0c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ea:c0:fc:4f:99:f2:55:36:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff41215-3026-434d-963c-327afdcf5cbe
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=12c929e2-d387-4fbe-91db-554e41c47457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:1b:bf:10:c3:a1:f6:ad:18:b9:4f:10:71:
                    56:58:c9:b4:7a:32:2a:50:42:47:d4:f4:13:85:30:
                    09:29:fc:17:ff:b6:18:07:35:7e:bf:74:34:ab:16:
                    ac:1f:0d:48:3b:72:37:aa:45:b2:d7:26:9a:3a:69:
                    a5:00:d9:58:e2:af:4f:2e:34:4f:f5:f6:b0:fd:9b:
                    78:ed:2d:1b:f4:58:29:fd:d8:ea:d1:6c:ab:ac:d6:
                    93:67:d0:91:14:b7:05:12:ea:0b:74:ab:57:5e:23:
                    9f:07:ce:2e:f7:30:3c:a3:8e:83:54:81:82:3f:fc:
                    96:5d:a2:70:75:41:64:ff:0f:a4:85:2a:e9:db:2b:
                    60:d1:3c:12:7b:6a:d4:7b:f6:7d:de:70:a3:78:c6:
                    aa:2b:5c:0c:df:9b:15:7f:84:2a:a3:d7:3d:62:23:
                    fc:e3:9b:16:5e:6b:58:2e:9a:e2:e9:47:f6:62:0f:
                    a3:33:bc:43:30:3b:3b:37:01:c9:26:be:e8:74:e0:
                    5c:8a:e7:a5:0f:63:2e:1d:77:73:0a:74:cb:15:9d:
                    72:98:7c:03:a8:33:6f:49:9d:41:e8:41:3c:e2:75:
                    d3:5f:71:90:fe:ca:80:f8:08:fe:c5:e9:28:50:7f:
                    6b:9d:c4:92:5d:19:75:aa:76:1c:74:9e:53:ba:90:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:60:DA:A2:D8:CC:91:32:50:B3:F3:EA:7B:41:59:71:A5:86:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/148a6272-1a42-367e-a934-0b576a07d74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl

            X509v3 Authority Key Identifier:
                keyid:AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:42:ee:5a:ca:a8:57:0a:89:16:fc:fc:dc:e4:5b:52:25:
         35:8d:ef:86:50:dd:0a:70:a3:5e:90:63:dc:9e:58:66:23:84:
         3d:be:d1:e6:f5:21:e1:7b:49:5b:d0:79:1b:c1:2e:c2:31:3e:
         31:a2:b1:ae:b8:02:6e:d5:a8:60:5e:f7:9e:6c:0b:e6:29:84:
         1c:f5:00:ba:c9:c7:eb:a5:ec:b8:24:6f:99:b5:be:5f:ff:9e:
         dc:cd:04:34:81:67:bb:87:c4:31:77:82:78:ec:e5:da:02:29:
         6a:51:a2:1d:a6:2a:69:2f:ac:d3:9c:49:cc:bd:f4:42:9c:b4:
         8d:ba:eb:88:76:b8:eb:25:93:01:23:b8:09:77:2a:e8:75:5f:
         19:41:b0:1a:32:d8:2c:78:2a:21:8f:84:b5:ec:c2:c0:f0:df:
         c2:65:c6:0f:4c:1c:16:9d:3c:90:50:d0:17:80:9a:a8:d3:1d:
         78:3d:5d:62:4c:b9:07:44:84:2f:0a:fe:53:31:44:56:8d:e6:
         09:52:3d:fa:58:88:95:b9:af:ac:76:51:11:7e:08:58:3a:55:
         0c:f7:23:29:65:e5:a9:a4:23:09:73:e8:9e:36:33:e0:c8:e6:
         7d:4d:de:4f:7b:6b:aa:ef:5b:fd:91:47:67:67:4d:41:c3:a7:
         b6:01:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:59 2026 by rpki-client