Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/005241ca-b220-3c47-ba7e-8f956eb26d08.roa
File:                     005241ca-b220-3c47-ba7e-8f956eb26d08.roa (raw, json)
Hash identifier:          jEKZth1kEkZNM976xgq9elYdjakZeohjuq3I2Br/yP0=
Subject key identifier:   6F:92:1E:5D:58:A2:D6:F1:31:55:C5:B6:AC:4F:ED:69:AE:45:2C:90
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F50A22832FF02FD8673900
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/005241ca-b220-3c47-ba7e-8f956eb26d08.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14618
IP address blocks:        2620:147:c10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0a:22:83:2f:f0:2f:d8:67:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=9e4edcc5-d25d-4c29-aba6-b28f94846d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:ff:fd:fd:fd:41:2c:2b:d1:5b:91:22:04:
                    db:a5:e1:87:52:f8:c3:21:7d:04:d0:80:bc:78:ab:
                    63:d7:91:85:5a:ce:84:01:34:ad:e5:3a:ee:1b:bf:
                    7b:c7:1a:33:e1:53:01:d8:b7:2b:b0:d6:eb:16:90:
                    2f:f0:f3:3f:49:85:dc:57:b1:df:c0:a5:ab:89:1e:
                    ea:26:06:08:8d:63:af:f8:92:32:af:79:77:e9:d9:
                    e6:d7:cf:e7:6f:74:ce:ee:09:ff:3f:f8:2c:16:e3:
                    e6:2e:66:07:a4:58:50:cc:76:7d:0f:f7:52:b8:f4:
                    86:28:e9:b4:cb:c5:07:2b:1c:86:39:d0:92:02:a1:
                    5c:c3:c0:f1:a2:bf:4b:c7:75:fd:b9:de:37:0b:0e:
                    10:9f:20:63:5c:11:4b:d3:2a:1a:4e:ca:29:ee:20:
                    fc:60:e5:c6:c0:6f:33:88:20:71:bd:25:da:d8:29:
                    14:ec:69:63:c1:a7:3c:ea:cd:b4:fa:11:a6:c2:33:
                    c1:dc:5e:e1:22:c0:fa:a9:49:ee:d7:9c:a4:e6:8a:
                    46:fe:e7:fa:a2:14:48:89:9c:9e:aa:7a:4c:85:9a:
                    83:40:87:1b:4e:a9:da:79:cb:c4:dc:f9:31:28:03:
                    cb:02:71:a6:67:b2:09:9c:8c:a7:d5:de:96:6d:d2:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:92:1E:5D:58:A2:D6:F1:31:55:C5:B6:AC:4F:ED:69:AE:45:2C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/005241ca-b220-3c47-ba7e-8f956eb26d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:58:84:93:a4:b7:48:fc:2f:ae:68:c1:01:42:c3:e1:71:fd:
         e6:63:2d:c0:02:c2:1d:e0:0b:2c:40:14:53:7f:46:5a:fd:ac:
         f8:c3:14:73:7e:62:67:6a:8d:38:30:2f:9c:da:d4:39:b5:84:
         4c:8e:09:81:1a:b3:6f:25:34:1f:ac:29:7e:4d:ed:fc:5c:2e:
         a8:e7:86:cf:6c:a1:39:da:b9:73:09:d4:1d:1f:97:85:bc:20:
         36:70:c7:34:55:ec:d2:ab:ed:7a:94:d5:ef:b2:b9:35:6c:3c:
         de:6d:98:59:4c:ac:e8:61:70:c4:7f:1a:3f:43:7d:46:eb:98:
         65:c6:83:3b:30:a2:f3:21:78:ee:e8:50:7e:05:5c:15:a7:da:
         c1:68:49:ca:1a:64:1a:85:67:4a:e3:d9:52:83:d8:99:7f:a1:
         1d:a2:52:f0:2b:50:ae:aa:2b:b9:62:77:5f:64:4c:95:be:31:
         3b:4b:73:cb:d8:77:5e:3a:b3:97:fe:41:00:a3:57:fe:69:e8:
         84:1b:a7:6d:24:11:fb:f0:d0:17:3f:e5:30:f6:53:d9:cb:94:
         29:13:fa:6e:7d:07:b4:52:73:f4:ad:dd:8d:2b:c6:d8:48:11:
         42:dc:f2:88:68:d9:b9:e3:82:5f:4c:d8:5d:f5:c4:36:29:be:
         c1:34:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:59:42 2026 by rpki-client