Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa
File:                     47731c14-7007-3efe-8b97-b32fd08f625e.roa (raw, json)
Hash identifier:          bsprApx0I3lxdaYboNnq6idlYU04uDMflaP9pZwpG3E=
Subject key identifier:   3E:75:0D:12:F9:FC:D5:7F:22:19:6C:0D:2A:B6:97:64:AE:60:88:E4
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584E7204C3FFC8B1424FE1619B80
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     12213
IP address blocks:        2604:7ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c3:ff:c8:b1:42:4f:e1:61:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=e557312d-6f67-48a4-9304-629584fd55e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6b:2f:dc:da:b6:8b:c9:a2:7c:b2:13:92:ea:
                    87:a7:e6:9d:dd:2e:87:80:e8:29:a0:2f:7e:3d:3a:
                    fc:c5:6a:0b:6d:8f:c8:ed:12:80:ea:a0:c3:96:24:
                    47:0a:dc:44:07:12:1e:a5:9a:b5:5a:4e:69:f3:66:
                    9f:b8:d6:fa:0f:36:2e:9c:a2:42:1e:0e:7a:44:21:
                    e5:5e:70:0d:b7:7c:58:83:51:3f:c2:2a:23:17:8d:
                    de:36:3a:70:ff:13:f7:f4:2d:11:8c:49:76:c5:a3:
                    84:cf:4d:5b:69:dc:08:2e:2f:04:15:3a:e1:c4:51:
                    43:b2:03:e6:19:a0:c2:57:68:87:70:c5:ae:04:23:
                    38:2b:65:1f:40:df:63:67:82:2c:f1:d3:98:b0:f7:
                    af:d0:70:64:25:e5:c7:8f:dc:5b:d0:c6:fb:e7:58:
                    0f:af:87:95:62:07:b5:61:2a:aa:19:bb:e2:5c:f4:
                    d5:de:5e:6b:88:34:28:e9:73:2e:79:ba:00:c9:d6:
                    22:cf:e8:34:e2:f3:91:0c:7b:14:73:34:27:78:7c:
                    93:9e:4f:76:e0:24:05:fa:33:27:1d:c7:1b:7b:8d:
                    50:1b:d7:88:f7:29:06:ed:65:24:fe:16:c0:85:65:
                    55:b2:10:44:d1:34:fd:b7:dc:22:c4:83:6c:26:f9:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:0D:12:F9:FC:D5:7F:22:19:6C:0D:2A:B6:97:64:AE:60:88:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9d:28:1b:08:ac:cb:41:cc:c3:86:10:54:c5:c1:be:e2:5e:
         ff:99:3f:49:4e:5f:b2:22:27:f1:29:26:c0:9e:a3:65:41:df:
         b1:f8:18:9e:46:5f:6d:72:19:97:36:5b:ae:a4:81:ce:c0:2f:
         64:5c:7c:8e:47:fc:4c:02:95:cc:44:a7:13:2f:fb:85:d9:01:
         7b:ee:98:a6:76:b1:52:a9:5a:2c:21:db:05:17:23:52:db:5c:
         17:fc:a3:74:e5:44:ff:c5:33:f3:3b:6a:f3:e3:dd:64:4b:80:
         94:4e:1d:7c:64:ce:66:c8:dd:3b:3c:b8:b9:bf:46:9d:3d:05:
         b6:07:06:79:c3:41:30:af:07:77:85:ad:f0:0c:c1:db:68:42:
         d0:ba:ee:97:b7:7a:50:08:a5:1f:12:34:68:07:90:3c:2e:33:
         75:b8:b6:43:38:2e:b4:ea:0d:43:d7:ed:db:b6:67:3f:b9:e6:
         9b:bd:fd:7b:26:7d:ff:54:26:61:84:48:39:a2:b7:b1:b6:91:
         2c:1f:e1:fc:e1:f1:0d:95:dd:cc:0d:67:f7:fd:53:da:e8:90:
         4a:8a:87:1e:1c:08:07:1b:2f:61:55:f0:2e:5f:c9:1b:2d:63:
         89:fc:fe:17:ea:d4:0c:b5:ed:3b:79:ec:db:14:8d:b9:6b:b1:
         75:30:c5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:15:19 2026 by rpki-client