Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa
File:                     c967a983-4816-3b7c-b4d6-367640f11653.roa (raw, json)
Hash identifier:          pgkNX90sCwDLCk1i0BDeZBEg1IpzQCHlxOsJzvcrP40=
Subject key identifier:   B5:18:47:6C:E4:E4:EB:3C:35:E0:D2:87:AE:89:DF:8F:11:DB:64:06
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584E885A3DEA176FC35F58FDFAF0
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        2605:84c0:50::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3d:ea:17:6f:c3:5f:58:fd:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=72e3e6c5-dd50-4f4e-82a9-75d03ffce92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:bc:c6:d0:80:ca:4f:dc:40:c0:07:9e:27:
                    62:50:f5:c1:cf:f4:cd:1e:ca:8d:b0:d2:bf:2e:5d:
                    1a:e7:69:d8:f3:75:46:e6:f0:ed:66:68:f1:4f:ed:
                    ef:74:eb:ac:96:1b:ed:fd:1b:70:1b:a4:4d:81:f9:
                    72:40:94:b9:53:38:41:fb:c2:79:3d:3a:5f:e1:8e:
                    1d:bb:e5:ac:07:8d:cc:84:47:39:56:e0:ea:c3:65:
                    fd:a1:0d:80:a5:13:ee:f3:fa:46:10:4f:f3:c1:a0:
                    64:86:82:17:82:81:b9:25:52:95:f8:4c:f6:99:6f:
                    e9:b6:49:7c:02:a9:08:20:03:24:0e:37:00:26:f4:
                    fa:ea:16:34:43:88:de:4f:ff:2d:4e:cf:7f:ca:ef:
                    33:68:7a:3c:c5:bc:00:68:ff:8d:85:c8:4e:5f:d6:
                    7f:14:16:b7:57:52:18:ed:5f:4a:2f:95:71:40:4e:
                    4d:5b:f4:e9:97:20:2c:cf:da:73:58:6b:81:51:3e:
                    82:17:73:8c:e9:e7:6f:b3:d7:42:e7:e7:6c:36:00:
                    00:2c:7b:c5:07:59:7f:4c:c6:82:c7:3c:20:31:ad:
                    d0:2f:87:42:bd:ed:0b:31:b7:53:0b:6d:c9:f0:9d:
                    99:61:12:a7:6e:7f:c8:6e:18:b4:6c:d0:e9:53:9f:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:18:47:6C:E4:E4:EB:3C:35:E0:D2:87:AE:89:DF:8F:11:DB:64:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:50::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:f2:46:67:09:14:1f:ff:ab:8e:cf:4e:50:21:f0:66:89:
         8e:93:3d:e4:2a:6b:6c:2a:f0:c7:f4:7f:10:4f:cb:2d:bc:13:
         12:12:8e:49:2b:ad:13:3c:c1:75:50:a4:3d:9b:d8:14:73:5a:
         87:da:db:16:bb:19:e1:6a:7f:00:1e:33:b5:b6:3d:11:1e:97:
         13:36:20:9c:91:19:85:05:86:a7:4b:42:c8:7b:52:e2:3a:76:
         78:8c:4d:da:78:1a:8b:d0:d1:a5:c9:ec:49:d8:a7:1c:e6:36:
         88:64:dd:71:c8:fd:5f:1d:a8:38:47:a1:a3:69:8a:e3:cf:57:
         18:df:69:d6:54:88:ce:54:6c:17:9b:73:0f:ad:2d:55:e9:f8:
         f3:50:c0:9c:c1:05:63:74:82:1d:80:30:6c:f0:7c:e1:14:ec:
         7b:b3:4d:b3:0e:ac:71:e5:54:71:10:be:af:b1:4c:c5:34:2f:
         33:e1:d3:f7:48:1e:89:d9:96:7b:ef:b4:bd:8c:56:62:ba:ba:
         73:38:40:f9:ae:66:a8:c2:8b:75:77:09:bc:6c:1e:c7:bd:af:
         83:4f:3e:39:33:92:b1:50:f7:a5:83:11:63:ce:e9:8b:02:e8:
         e0:14:b4:10:35:ad:5d:e0:20:31:6c:f9:0e:29:0a:bd:25:f7:
         85:53:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:09 2026 by rpki-client