Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4/64e3c688-7c4d-3990-be3b-d9cd5f39ac31.roa
File:                     64e3c688-7c4d-3990-be3b-d9cd5f39ac31.roa (raw, json)
Hash identifier:          HzDXqlIkKeD/qzho8XxGCwCxa+dSn1yN/ooE5bFPQgg=
Subject key identifier:   25:02:14:A3:6F:E9:3C:BA:78:2A:E1:96:F9:BF:B3:B0:19:61:BB:E6
Certificate issuer:       /CN=f1a11ab8-d388-4102-9a9c-c8c48843c6f4
Certificate serial:       010D0C9F4328584E98DAA57CB6FC823563B5DB80
Authority key identifier: 3F:ED:7E:6B:DE:FB:86:A2:F1:00:33:DB:A3:5D:21:CD:9A:31:64:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4/64e3c688-7c4d-3990-be3b-d9cd5f39ac31.roa
Signing time:             Thu 23 Jul 2026 18:51:56 +0000
ROA not before:           Thu 23 Jul 2026 18:51:56 +0000
ROA not after:            Wed 21 Oct 2026 18:51:56 +0000
asID:                     13576
IP address blocks:        2605:4b80:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4/f1a11ab8-d388-4102-9a9c-c8c48843c6f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4/f1a11ab8-d388-4102-9a9c-c8c48843c6f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:da:a5:7c:b6:fc:82:35:63:b5:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a11ab8-d388-4102-9a9c-c8c48843c6f4
        Validity
            Not Before: Jul 23 18:51:56 2026 GMT
            Not After : Oct 21 18:51:56 2026 GMT
        Subject: CN=7c176a48-c8b5-4b02-be39-df849d6a75d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:fb:f5:2d:34:49:f6:f9:13:bb:53:30:af:
                    e7:34:6e:0a:d3:4c:40:9d:d7:6c:76:35:33:f0:9c:
                    4e:99:48:e1:01:fa:f0:85:63:9a:bf:8f:80:39:95:
                    7d:c2:55:4e:86:3a:20:81:c5:d6:c8:d6:c2:9a:2f:
                    70:fb:05:10:bd:3f:23:d4:85:26:9b:71:36:93:c0:
                    72:75:6b:9a:23:34:c2:6f:19:17:a7:ab:51:49:4a:
                    58:80:35:dd:cf:c7:99:f6:f4:8f:83:01:13:0f:c5:
                    1a:17:a6:3c:4e:91:0b:ff:4e:36:94:75:e6:3c:f1:
                    15:e7:9d:ec:7d:b4:f4:81:41:db:4c:50:0f:89:f1:
                    8b:27:76:ee:96:e0:e5:4d:5d:15:71:c1:17:6d:40:
                    f9:ff:5a:64:a8:37:7b:05:0d:38:22:39:a2:03:21:
                    51:a2:5e:08:88:34:e7:9c:7b:84:72:7e:52:1f:c9:
                    9b:5d:2d:a1:f2:14:bf:88:ea:85:1d:57:ce:5a:b1:
                    cb:a9:d5:45:0e:09:44:cf:98:7f:88:25:12:7a:3c:
                    31:b9:cc:2f:88:82:28:2e:e9:81:95:74:3e:65:b9:
                    83:7e:c2:d1:ea:b4:6e:55:67:bd:b3:c6:c3:2c:79:
                    62:18:77:fb:3c:e8:22:68:3c:dd:99:42:ff:99:5a:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:02:14:A3:6F:E9:3C:BA:78:2A:E1:96:F9:BF:B3:B0:19:61:BB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4/64e3c688-7c4d-3990-be3b-d9cd5f39ac31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4/f1a11ab8-d388-4102-9a9c-c8c48843c6f4.crl

            X509v3 Authority Key Identifier:
                keyid:3F:ED:7E:6B:DE:FB:86:A2:F1:00:33:DB:A3:5D:21:CD:9A:31:64:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1a11ab8-d388-4102-9a9c-c8c48843c6f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4b80:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:07:dc:d6:5b:45:c8:bc:63:6c:40:06:ba:39:b9:d0:a1:
         7a:86:2c:ec:88:e6:30:b8:f5:87:dd:7c:a3:88:9f:fd:60:5e:
         28:3a:c8:33:f6:4e:4a:fa:6a:ee:73:56:7d:d0:e2:ed:73:ab:
         3d:c5:84:6c:27:f3:75:a4:9d:16:df:54:6e:f5:81:d2:a7:76:
         d0:5d:2e:4a:b9:ca:04:e4:22:c6:4c:a4:c0:b2:73:7f:25:a6:
         91:2c:43:04:3e:65:1e:0b:98:62:94:85:b7:e5:51:22:2a:53:
         63:28:26:3e:b6:4a:c3:c9:68:6c:3a:55:c6:7c:69:37:37:72:
         7e:3b:4e:17:19:b6:49:c0:27:58:b8:0e:7d:38:51:b6:bd:97:
         53:65:71:fa:c6:dc:5d:42:21:82:21:2d:60:18:47:82:09:54:
         e0:2d:05:1a:b9:35:ff:41:fe:05:7e:9c:52:cd:c3:03:e8:f1:
         69:46:0d:bc:1a:dd:4c:76:08:ab:14:f3:1b:c5:f8:07:68:20:
         c8:db:b7:24:f2:37:10:e1:7b:b4:f2:37:7f:d8:65:5e:18:75:
         ac:ab:85:ab:76:49:59:23:25:8d:38:3e:0f:72:03:b2:89:69:
         e6:3d:fd:96:1c:d1:b7:35:b6:9d:6f:b0:cc:87:85:00:cf:7d:
         dd:b5:32:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:00 2026 by rpki-client