Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa
File:                     1626650d-bc51-3b45-ae3f-8d59976db3ea.roa (raw, json)
Hash identifier:          /AcHZGnYS0JRmExfh83YhJcgTOIXDTJn58VzI2pO20I=
Subject key identifier:   E4:01:F0:94:B2:7D:68:9C:C2:B1:AB:8F:AA:10:68:18:01:72:A3:A1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E78FF838448405C92CD235900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     6939
IP address blocks:        2600:7000::/24 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:83:84:48:40:5c:92:cd:23:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=8776755e-df76-4578-a79e-3be74da3b5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:f5:65:3a:4a:27:8a:c1:f2:f7:5b:08:92:
                    48:d1:c3:f6:9c:81:03:0c:45:d6:35:54:32:70:bd:
                    4d:dd:b5:a2:fc:1a:e7:fb:28:50:4d:26:c7:87:c0:
                    6d:13:cd:ba:8c:fb:5e:8c:31:62:36:70:16:09:20:
                    de:e9:9c:3f:d2:d5:4d:5c:06:0d:b1:46:33:c1:57:
                    1a:1e:61:80:cd:89:60:04:26:3f:89:38:ab:40:63:
                    59:c8:be:d0:3f:23:84:f5:6b:be:b9:ed:c5:a8:cc:
                    96:47:e4:ff:22:f6:a0:64:97:f9:f2:d9:72:69:f6:
                    98:ec:0e:3d:8c:fa:1d:ce:84:96:53:ea:fa:4c:60:
                    e5:fd:39:99:ea:38:8c:48:ed:83:bf:3c:94:ed:90:
                    5c:5f:3d:37:6b:72:95:51:4d:ec:3d:32:14:7d:dd:
                    73:3b:66:20:d6:2c:98:c2:52:88:60:63:cf:45:77:
                    f4:7e:b4:39:62:a3:24:42:f9:49:5f:d6:fd:69:1d:
                    8c:ff:5a:7f:ee:93:6d:ae:ec:46:f9:a3:79:37:8b:
                    57:a5:0f:a2:4f:7a:44:6a:5b:82:a7:10:11:ef:e2:
                    9c:5c:a1:99:bb:c2:d3:d8:2e:69:d1:ef:37:a6:3c:
                    e1:c1:2e:2a:2d:2e:3a:7e:6a:2f:a9:e1:96:de:63:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:01:F0:94:B2:7D:68:9C:C2:B1:AB:8F:AA:10:68:18:01:72:A3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:7000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:53:7f:b5:99:6f:89:1d:18:bd:21:19:de:b8:1b:4a:16:
         dc:24:6e:ec:c4:5d:1a:6e:77:c4:e2:e4:73:23:5e:1a:9c:3b:
         be:54:95:69:05:24:1c:98:34:43:cb:66:b7:b9:93:c8:a1:d4:
         24:5e:28:17:a7:9e:17:75:82:b3:84:3b:50:0c:4f:a5:26:25:
         8e:6d:16:1b:6b:8d:d2:3e:fc:32:de:9a:66:9b:a7:11:ed:6b:
         14:df:02:54:98:86:e1:78:e7:9f:68:a7:63:68:5d:38:3f:1a:
         d1:22:5e:7f:0f:6f:43:b8:b5:3a:9f:df:f9:b3:0a:ee:82:18:
         3f:c2:a5:82:ae:c0:0b:da:50:43:47:5f:b1:69:7a:4e:b4:98:
         13:33:ee:dc:12:c6:7f:cf:74:48:de:3a:1c:d2:65:7f:97:c8:
         ea:e1:a8:c1:19:a8:6b:98:3b:f8:05:35:db:0a:4e:21:36:4b:
         19:69:f1:94:59:5c:70:8a:52:eb:c3:01:93:d7:43:e7:a7:cb:
         37:cb:1a:16:61:51:0c:ad:12:76:0f:c8:46:de:cb:5c:60:fe:
         80:9a:45:77:d8:e6:04:9e:ca:64:21:4c:2c:d9:cf:da:48:00:
         aa:58:af:5a:70:7b:7a:56:58:58:cc:e4:bf:2e:1f:30:51:6c:
         57:d9:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:02 2026 by rpki-client