Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bc0ee59-c9c5-30dd-8d7a-4d8341e9b6ba.roa
File:                     2bc0ee59-c9c5-30dd-8d7a-4d8341e9b6ba.roa (raw, json)
Hash identifier:          nGiBIWP1M0R/xQEDyZqzC6ATz9NGH5KThKQUlz+pCCw=
Subject key identifier:   4D:89:39:E1:3F:A2:0F:C4:AF:CA:D8:F9:BB:1D:55:B3:64:77:8B:70
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584E7A64E1A8101B737EE7F20180
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bc0ee59-c9c5-30dd-8d7a-4d8341e9b6ba.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     6079
IP address blocks:        2610:80::/29 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e1:a8:10:1b:73:7e:e7:f2:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=0b8916e3-0748-4c4a-8ef8-ff97f3082ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:71:c4:f6:d6:e3:a8:3d:2b:ae:0a:7a:cf:
                    a5:17:b8:61:3c:03:76:19:87:fc:35:6e:29:63:fd:
                    05:6f:ed:d9:d0:9a:08:76:a7:24:a7:c2:92:42:65:
                    26:17:30:52:10:73:72:c6:41:ec:2d:63:be:98:ba:
                    29:3f:b0:85:c0:18:6a:23:7f:22:12:bb:17:52:04:
                    78:2f:ad:f7:88:53:66:2c:41:6c:fd:0a:ae:6c:6a:
                    24:37:3a:45:ae:a6:75:14:ea:21:8b:76:2e:a7:c4:
                    1e:c2:07:aa:ed:aa:52:18:cf:2a:00:e5:12:01:8d:
                    c2:65:20:33:a2:44:67:35:ea:b0:00:e7:d9:ce:6a:
                    c2:ce:22:4c:ce:6b:ea:0c:22:ec:94:72:ec:82:d9:
                    1a:0e:8d:ad:a1:c8:f6:4b:2f:ab:75:38:f5:e2:1d:
                    a8:9d:99:6e:31:4e:d8:89:cc:e0:87:2b:6f:12:45:
                    b0:95:3f:34:35:25:e1:27:c9:7b:7c:88:ac:d4:93:
                    3a:7e:09:db:24:3c:5f:fc:64:a6:38:cd:72:ee:7a:
                    e9:e0:31:f9:75:84:40:bf:94:01:e7:61:c6:5d:85:
                    af:0d:26:98:61:fa:e4:88:bd:99:71:ff:34:5e:4f:
                    05:6f:66:d5:ea:03:bd:c4:e7:43:62:d6:e4:03:2b:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:89:39:E1:3F:A2:0F:C4:AF:CA:D8:F9:BB:1D:55:B3:64:77:8B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/2bc0ee59-c9c5-30dd-8d7a-4d8341e9b6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:80::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:f9:7d:f7:1d:a2:68:48:89:01:3d:c6:ef:60:8d:04:34:
         26:5a:2c:e8:58:54:0d:19:81:b5:ec:eb:3e:4b:9e:92:d4:02:
         6a:2f:b3:ac:25:22:2a:c5:fe:4b:58:f9:5a:cb:bf:61:5d:a0:
         d3:c2:82:e3:7c:aa:aa:31:c3:1b:d6:7e:32:38:92:3e:5d:0c:
         34:a7:6a:65:20:e2:74:df:d8:55:f2:6c:1d:d0:36:86:f8:0f:
         83:a0:73:31:15:6c:bd:e9:34:28:d9:07:5f:ea:b9:84:1d:6f:
         c9:51:bd:3c:ff:51:ff:32:c0:5b:1f:2d:2e:40:35:3c:73:f9:
         76:ac:ff:3d:11:0a:ac:68:5b:e7:e2:f6:54:69:bd:f7:7e:34:
         08:a8:1e:db:3f:0c:00:95:9b:61:d1:f8:41:0f:7b:36:a9:8b:
         8a:48:63:7f:7c:cf:fb:28:61:05:56:f8:a6:9b:a9:f6:91:9a:
         22:f1:f9:33:62:0a:87:53:e9:01:8e:09:54:cd:20:21:bc:a3:
         23:fa:24:25:2e:69:99:49:1b:70:6d:50:23:ab:4d:05:71:8e:
         ed:68:9a:92:e3:2a:3d:2e:a1:09:a5:13:a3:51:46:95:fa:c3:
         37:30:a9:90:27:62:66:8f:2b:9e:e3:6d:bb:fc:cb:b5:42:f1:
         13:9e:37:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:32 2026 by rpki-client