Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/49128c41-3d0e-32d0-830b-12d889baed81.roa
File:                     49128c41-3d0e-32d0-830b-12d889baed81.roa (raw, json)
Hash identifier:          t9sqfBXjTdq96pMKfoXILoQCq/EG2QeRfhs2ol2/hG4=
Subject key identifier:   E8:61:92:EA:CB:2E:18:A1:AE:3E:F0:C9:CA:41:87:0F:AB:55:30:01
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F4328584E6F3A44658EE360FCA556D328
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/49128c41-3d0e-32d0-830b-12d889baed81.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     18474
IP address blocks:        2607:9c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:44:65:8e:e3:60:fc:a5:56:d3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ec4f7a78-364a-4ce8-af03-027be2792505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:cd:25:a0:1f:71:92:35:67:a5:df:13:0e:
                    1e:d4:40:9b:f9:66:78:0d:87:07:5a:1f:f6:f1:04:
                    e5:92:b2:cd:9e:12:0b:c1:cb:d0:35:5b:12:a8:d1:
                    d9:13:e2:24:d6:4a:bc:88:fc:8b:7f:1b:af:89:69:
                    e2:b4:97:d5:43:a8:28:37:68:2f:56:5c:e0:95:26:
                    c0:86:be:ae:b6:45:82:2a:1f:f3:b8:d4:f3:1c:a2:
                    f0:44:14:f4:0b:6b:5f:10:a3:da:43:2c:0a:c7:b2:
                    32:fa:da:88:36:1b:19:d9:e6:a3:94:fb:77:75:60:
                    0e:b1:11:dc:55:43:b7:c4:26:a7:1e:37:23:09:a1:
                    1c:cb:2e:bd:61:4e:47:0c:cc:93:f9:6c:7c:3a:07:
                    6e:e1:03:5f:9c:53:ab:63:bc:67:38:29:ba:f4:fb:
                    0b:35:79:12:4f:9a:cd:cb:1c:0e:8a:b3:ca:ed:1d:
                    07:79:1a:8f:79:65:73:d5:a7:16:37:ce:a8:a7:49:
                    1a:da:1b:cc:1c:58:ae:15:31:9a:c3:49:cb:ba:df:
                    f5:8c:6e:9c:60:1d:9a:82:68:7c:98:dc:41:55:27:
                    c3:f0:4b:83:b6:81:bf:57:30:e2:17:d7:32:50:cb:
                    34:df:be:57:fd:68:9c:8c:05:7d:6d:8a:70:20:73:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:61:92:EA:CB:2E:18:A1:AE:3E:F0:C9:CA:41:87:0F:AB:55:30:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/49128c41-3d0e-32d0-830b-12d889baed81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:73:dd:58:73:07:17:e6:16:f3:64:95:c3:0b:e3:e6:04:e2:
         e8:b9:df:bf:83:20:3d:65:4c:f6:07:3f:37:09:9a:19:38:8d:
         54:0d:c2:47:b5:5a:4f:72:f8:98:fb:c8:37:f4:17:58:12:94:
         62:76:fd:a1:80:ae:e6:4c:07:41:e1:b8:db:da:cd:b8:bd:03:
         4e:85:e0:24:0f:41:c7:94:4f:25:25:9d:07:fa:83:94:6f:95:
         cb:5a:97:80:4d:95:5e:ec:f6:17:2f:a1:39:24:32:77:3d:cb:
         95:cc:4d:95:f5:bc:ea:d4:fa:a6:a2:3a:22:7d:44:5f:67:0d:
         c5:cb:1b:62:d9:59:5b:7e:bb:ae:1c:27:27:c1:ed:96:9b:bd:
         03:74:64:3d:b7:84:9b:f2:14:7d:11:a5:c4:1c:f3:4a:d9:6d:
         91:6c:fa:b2:26:f5:3e:ae:2b:61:b3:5d:12:bf:f6:72:5f:df:
         57:01:9d:e8:52:5f:6e:08:f0:1d:c1:1d:9e:73:a7:53:41:12:
         0e:7c:b7:ae:76:65:f4:7f:9b:aa:0e:5c:4c:73:cd:b4:8e:f0:
         af:64:e2:8a:e0:69:d8:68:85:f3:df:39:36:28:24:a7:45:5c:
         c6:59:be:45:07:f6:8b:9a:85:34:ec:da:94:74:cd:0e:94:d2:
         1d:8b:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:05:06 2026 by rpki-client