Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/6482c787-c3d1-38a1-b442-2d06e7a96eb7.roa
File:                     6482c787-c3d1-38a1-b442-2d06e7a96eb7.roa (raw, json)
Hash identifier:          fWTou3MVEBFMRi/zRcINcCxwhL3Z+l6NTvvbr/pN144=
Subject key identifier:   3E:31:D3:09:1E:28:7C:D0:02:80:AD:D0:52:8D:52:1E:DF:48:B5:1E
Certificate issuer:       /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial:       010D0C9F4328584E7E94EEF59279C90315D36B78
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/6482c787-c3d1-38a1-b442-2d06e7a96eb7.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7018
IP address blocks:        2607:52c0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ee:f5:92:79:c9:03:15:d3:6b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=e8aefd4a-46b2-4d70-a6e9-1c96ba2877bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:b1:a6:7b:38:83:7a:6a:06:01:de:91:cb:
                    91:68:8f:67:7f:c3:b5:58:3f:af:34:7e:65:06:98:
                    f8:a4:c7:30:e2:5b:63:5a:bb:73:b4:06:17:32:5a:
                    4e:87:8b:9c:01:07:bb:f0:f5:25:79:57:4a:42:fb:
                    fb:76:1d:e0:c1:bd:cc:82:d0:ec:3c:ec:d5:a8:f2:
                    d0:75:78:8c:6d:fd:b5:16:1d:b6:99:59:10:ef:94:
                    56:5b:ec:e5:c1:92:94:50:36:68:9b:10:06:83:ee:
                    51:19:fc:20:4b:68:34:02:6c:f4:68:7b:c1:01:6c:
                    47:08:f0:1b:6b:00:fb:f4:5a:6c:05:9d:a7:fd:66:
                    16:30:40:95:4d:05:03:e7:21:49:b2:3b:f1:c5:4c:
                    3e:47:9a:10:42:64:60:e5:e9:db:14:12:07:a9:14:
                    59:40:24:8c:b0:df:03:70:38:32:5c:ec:9a:8c:f8:
                    9c:8d:bd:92:46:0e:46:e0:f3:ec:3a:04:42:31:36:
                    77:52:b4:7a:20:e6:ee:bc:e0:58:5e:80:68:e5:ca:
                    3d:ec:b0:93:99:2c:1d:d7:c8:55:2c:b8:81:42:d4:
                    d7:96:64:5e:dd:88:fb:78:4c:e9:1f:d7:9c:11:4f:
                    d0:6f:28:e7:dc:63:11:ea:5a:aa:2c:4e:6f:98:d6:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:31:D3:09:1E:28:7C:D0:02:80:AD:D0:52:8D:52:1E:DF:48:B5:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/6482c787-c3d1-38a1-b442-2d06e7a96eb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl

            X509v3 Authority Key Identifier:
                keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:52c0::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3e:30:b5:5c:79:f5:55:82:37:17:2f:34:df:2a:bc:da:93:
         2b:c5:bf:e1:87:f0:e7:36:ed:87:7f:ac:49:5b:c9:af:f4:8a:
         2f:8b:4a:a9:a7:2e:cd:29:32:6b:b6:38:17:94:0a:cf:be:6b:
         a8:99:af:1d:d6:96:b4:95:bb:60:c2:06:80:81:3b:1e:3c:c0:
         23:d8:bc:9c:34:96:43:cf:39:1b:f2:9a:6e:2f:cf:74:d1:c8:
         7d:94:9b:e1:cc:7b:b1:4e:1a:b9:93:39:42:8a:18:0e:89:28:
         8e:2a:d7:1a:16:ca:5b:29:7f:17:a7:87:e4:0d:8c:80:99:33:
         20:cd:ed:51:a7:03:d7:8e:ef:b8:41:3d:cd:d7:f4:ac:6b:6f:
         ab:4f:50:42:c4:95:3a:67:57:03:30:8d:60:47:de:4e:eb:0f:
         78:02:51:3a:6f:dc:7b:2c:db:e6:2c:41:2f:26:a2:f9:ee:07:
         b1:4c:ca:de:3d:a2:b8:66:3a:f9:46:06:93:15:2b:3a:5c:93:
         b3:a0:6c:a9:5f:c3:bb:f1:5a:6b:06:ea:18:48:20:c2:3d:64:
         c9:f9:02:0b:69:bc:04:dd:05:a9:78:ef:a2:45:6b:79:33:53:
         c0:1a:df:a6:8e:28:2c:e6:d6:fa:49:b0:41:78:d8:0f:91:2f:
         27:2e:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:32:50 2026 by rpki-client