Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa
File:                     c30fd692-555a-30f5-ae22-c5c6ecece012.roa (raw, json)
Hash identifier:          t+weisBz7M8hNpVvvm95dXT5mShU9a73VJuf8dkdRS0=
Subject key identifier:   ED:7C:40:B1:00:0F:AE:E3:D1:C1:2F:D4:8E:BF:B3:EE:CE:2D:87:98
Certificate issuer:       /CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
Certificate serial:       010D0C9F4328584E4F1F3CDC4D3E8E4E9C43BAB0
Authority key identifier: 28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     401529
IP address blocks:        2607:e440::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3c:dc:4d:3e:8e:4e:9c:43:ba:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=cf0e2630-a0ae-48ca-9d68-0483924adf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:6e:2b:91:07:0d:7a:b8:38:2f:1a:e4:4e:54:
                    5c:73:8a:cf:e1:be:28:ad:aa:c2:5e:4f:a8:62:05:
                    75:34:ec:dd:10:f9:0b:99:85:51:04:92:de:4d:96:
                    8a:30:26:bd:fe:8b:cb:43:2d:ea:28:a0:bc:cf:f9:
                    1d:82:50:1e:f0:d9:e2:a2:4a:e3:1e:7b:8b:a3:eb:
                    d3:b4:eb:1d:32:d7:1e:28:1f:1e:0a:4a:41:da:67:
                    d3:ad:11:0a:5a:18:a4:9a:a0:3d:19:9e:56:09:b9:
                    2e:6a:0e:5d:10:ed:14:e0:c4:2a:2a:7c:ac:d1:a8:
                    81:80:68:56:40:51:69:06:db:75:b8:eb:e5:58:22:
                    ed:5d:48:a4:0d:27:11:f3:31:af:60:29:13:e8:dd:
                    64:34:30:fb:6f:57:08:c6:93:76:5b:29:fe:0b:23:
                    d0:5a:23:06:7e:d4:3f:08:7a:54:a9:92:f2:b1:74:
                    da:0c:26:4b:10:d6:a3:85:25:5f:36:5c:1c:95:35:
                    cd:15:73:15:3f:04:a3:d9:a3:2a:a9:e2:13:eb:1d:
                    ee:1f:48:3e:da:50:91:74:a5:4f:0b:d6:c3:cb:e1:
                    fa:0d:39:bc:15:ed:ea:c7:16:c0:ab:94:e9:95:fe:
                    8d:a3:fa:8a:af:06:04:5a:39:82:c4:d0:4a:5a:d4:
                    13:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7C:40:B1:00:0F:AE:E3:D1:C1:2F:D4:8E:BF:B3:EE:CE:2D:87:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e440::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:18:dc:54:02:ed:2c:99:10:50:98:64:3f:08:61:25:8e:9c:
         6e:f5:7b:93:9d:71:d4:1e:b5:7d:b0:cd:09:6c:82:28:62:d8:
         ef:2e:55:57:8e:9d:40:86:2f:93:90:c6:5e:95:fe:3a:16:f5:
         b3:f7:3f:f2:6b:f9:be:d2:e0:55:f5:95:92:ce:55:d8:8c:98:
         44:3c:c7:d2:e1:c9:93:77:58:db:92:71:2f:42:f7:4a:2a:c5:
         91:71:4c:67:0f:96:3d:14:e9:d8:26:db:44:7c:61:05:15:5a:
         83:3a:8f:00:a2:b2:24:87:04:5f:5e:a7:73:56:24:51:99:1d:
         a9:6b:e1:ec:48:74:8f:b6:a8:7b:78:94:08:d8:1a:de:23:9d:
         7e:e2:01:9f:66:ca:35:b0:cc:7b:8d:5a:79:df:60:54:e0:36:
         bb:b9:cb:b7:30:10:14:a3:d9:68:7a:70:66:b4:4c:6d:fc:15:
         af:1f:0a:ab:30:83:18:82:dc:ad:4b:3e:e4:20:58:39:e9:9f:
         da:96:ac:e3:a5:5a:f8:63:d1:02:19:ad:cc:c1:a2:c0:64:f3:
         8a:45:07:ac:99:a9:e3:41:3c:0e:a6:f6:23:27:52:a2:dc:e3:
         ce:40:47:fa:ba:06:37:8f:e8:3a:53:44:ad:5c:6f:c3:f6:21:
         d8:2d:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:32:34 2026 by rpki-client