Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/011a6fc7-ca39-3805-9ce4-db812e52cf64.roa
File:                     011a6fc7-ca39-3805-9ce4-db812e52cf64.roa (raw, json)
Hash identifier:          GFG6iW9ijUUGPjoYP5FohbYTpd4RHKIPoELNCSnGw8s=
Subject key identifier:   B1:D9:F0:09:85:72:55:FF:7D:0A:17:2A:04:5C:C7:39:98:EA:00:92
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4E984856BF3DD5739358C
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/011a6fc7-ca39-3805-9ce4-db812e52cf64.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14618
IP address blocks:        2620:147:c34::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e9:84:85:6b:f3:dd:57:39:35:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=d54e9432-08d8-4443-94b7-5ac135823005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:93:bd:84:68:b4:b0:fc:82:d3:e8:8b:33:
                    82:32:f7:e7:11:bd:ee:cd:3c:ca:b1:a6:4a:f8:91:
                    dd:1c:a1:94:05:b5:b1:ae:d1:76:6e:f5:d3:c8:7a:
                    9e:ca:c8:35:07:34:8a:35:fb:d9:31:1d:46:35:1f:
                    ab:a3:c5:0a:3a:12:6b:e8:29:99:22:68:50:57:d2:
                    62:05:7f:2c:4a:fc:90:c4:46:d7:92:94:4c:a1:ac:
                    b7:04:69:bc:98:ea:b0:39:3a:78:44:d4:60:90:45:
                    21:61:85:49:1e:63:e3:17:31:5f:94:88:b5:8d:a2:
                    a5:f9:a4:4e:bd:1f:38:c6:46:17:cc:d2:0e:d5:e4:
                    83:f6:44:26:11:3b:d9:e1:7b:c9:7c:c5:ab:41:df:
                    04:c0:32:af:f4:e9:da:8e:ae:03:a6:a3:26:cd:22:
                    d8:86:f2:52:f6:c3:9c:a9:e6:fb:c3:b1:b9:cc:fa:
                    87:38:4e:9b:8f:d7:43:78:c2:14:52:8d:d6:61:12:
                    0a:7f:9e:90:01:23:61:67:2a:75:8e:4c:41:9f:ce:
                    f2:8a:90:09:77:cd:78:28:5b:c5:53:ed:e8:90:20:
                    14:74:89:97:c6:7a:41:8c:43:47:f9:c5:7f:f6:cf:
                    7d:d2:e2:45:0f:07:d6:46:5b:0d:2f:76:25:ef:3f:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D9:F0:09:85:72:55:FF:7D:0A:17:2A:04:5C:C7:39:98:EA:00:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/011a6fc7-ca39-3805-9ce4-db812e52cf64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c34::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:70:8d:73:cf:d7:c3:8e:76:11:6f:c6:92:85:0e:e0:73:23:
         9a:cb:8d:3a:b3:18:f0:4f:cd:6a:74:46:65:54:0c:3c:72:22:
         aa:df:e9:4c:be:25:ad:98:0e:68:86:9a:5b:58:5a:ad:cf:4d:
         b5:6c:67:d3:ef:8b:9e:ec:6b:8d:21:dd:ad:fd:99:04:fc:3c:
         a5:9e:08:dd:ba:cd:ec:ea:81:ee:d6:f6:a2:80:ca:74:c6:5a:
         c2:37:a7:aa:3f:38:ae:49:b0:26:16:7b:b5:fc:69:a1:ca:7e:
         13:35:5f:25:88:ad:7f:03:99:db:5c:c6:c5:22:81:ce:33:0c:
         82:0e:e6:56:ad:28:9b:5f:c0:ed:5e:30:e0:c8:6c:ea:3d:94:
         6e:07:0c:c3:c3:e2:d8:9f:ff:26:1e:e6:03:34:4f:35:66:14:
         8b:5e:f3:38:86:ed:df:a1:7c:34:89:31:07:36:81:9c:6e:3d:
         5c:21:e1:ef:4d:ae:7e:2b:74:d3:e7:e1:eb:4b:86:61:4c:0e:
         6a:21:4b:64:d0:be:50:35:40:ce:0b:7e:f4:cc:78:2b:ae:7e:
         9f:21:d3:8a:7e:5c:7a:53:da:f4:3d:c0:a2:b0:e0:26:84:6a:
         69:96:b5:0e:a5:ba:fd:a1:a5:45:ae:bb:66:1c:0a:74:c4:a9:
         77:63:0a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:59:47 2026 by rpki-client