Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa
File:                     7dae324e-ec74-30c2-b235-13f1ed8695f9.roa (raw, json)
Hash identifier:          N7FSKrC+Vg1EESZYGotG5OJ81jcHMZGU0URZKXgjQQo=
Subject key identifier:   EB:79:80:6B:90:53:77:1F:1E:EA:64:AA:00:34:66:A1:69:71:F5:EF
Certificate issuer:       /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4
Certificate serial:       010D0C9F4328584E86F4FEF3B852EB93F7923380
Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     394770
IP address blocks:        2607:68c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:fe:f3:b8:52:eb:93:f7:92:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=ad00fb11-2d18-43b3-94d5-41d65ef33424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:69:2a:ef:f4:36:ea:c7:e9:85:14:a9:83:
                    ab:61:62:c6:ae:92:49:1b:83:32:e9:83:2a:44:1a:
                    3b:3c:a4:91:66:79:d8:4e:57:af:d6:be:1c:b7:6c:
                    b7:bd:31:35:02:7a:89:77:cc:55:b7:40:79:b6:da:
                    00:6c:b4:df:4c:cc:a0:d6:00:9a:e7:73:98:9d:57:
                    e9:c4:34:1c:41:de:b5:f9:3a:0f:86:34:a4:78:17:
                    2f:46:48:ba:11:14:25:ac:b8:4c:f1:c3:c6:0b:c5:
                    a5:bf:6e:85:fa:19:a1:3b:6c:1f:a7:c7:0b:08:85:
                    a4:4c:16:ef:b5:06:e0:fe:87:81:4e:77:e4:2d:3e:
                    08:52:f2:10:87:0f:34:8b:48:7c:de:bf:6c:23:4c:
                    79:6f:56:a7:67:60:3b:ab:d5:79:6d:d9:f6:6a:db:
                    9a:39:38:7d:a8:4b:b6:dd:d1:19:65:7e:ef:7b:2f:
                    e7:8f:26:af:ea:21:e2:5f:72:8b:99:d4:4c:6a:a6:
                    b5:19:99:a3:f3:c4:49:9b:2e:82:36:08:de:08:bd:
                    a3:4d:6c:81:db:eb:e1:14:1b:59:ef:2c:39:fb:22:
                    f8:a9:dd:d3:9e:6b:45:03:ca:0d:27:97:2d:63:e4:
                    2d:4f:19:e4:41:91:f5:dc:3e:74:38:63:3f:79:a3:
                    b0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:79:80:6B:90:53:77:1F:1E:EA:64:AA:00:34:66:A1:69:71:F5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl

            X509v3 Authority Key Identifier:
                keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:68c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:70:7d:e5:1e:c7:80:2c:b5:65:d4:2c:f5:24:ea:b3:56:bb:
         7f:58:d8:a8:1b:17:4d:90:d8:61:d1:2a:87:fb:ec:11:bb:c4:
         fa:31:1f:da:1b:75:ae:62:49:14:72:00:4b:ac:9c:2d:3c:8e:
         e4:83:33:5d:f2:17:e4:65:5b:34:4b:59:3a:01:30:0c:e1:75:
         1c:4a:3e:e5:7a:0f:74:d5:e3:38:d4:47:13:d7:36:34:5f:6d:
         1b:f4:8c:1f:10:69:be:e0:ff:b8:4f:30:dc:21:eb:22:c9:17:
         00:a2:09:90:af:d7:75:86:04:34:46:73:2f:43:96:eb:e2:59:
         aa:5b:13:98:fb:81:61:30:b1:f2:48:c5:d5:ef:d6:95:9c:ba:
         68:b4:be:ab:24:23:da:5a:dd:bb:0e:97:e6:e7:01:73:73:5b:
         11:fa:41:05:0b:39:3e:43:f1:80:ef:fc:71:de:97:cb:98:8c:
         cf:a9:61:66:10:30:85:f4:2f:4c:66:24:9b:53:11:56:2e:92:
         60:79:19:41:28:73:a1:66:72:61:55:9c:8a:ac:ce:f8:1e:f1:
         9a:8f:c4:86:af:a4:52:ce:cb:f6:42:10:9c:47:c5:70:4b:34:
         f8:12:67:6c:f3:98:10:df:8d:69:26:15:8a:23:29:fa:04:6c:
         e3:86:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:34:42 2026 by rpki-client