Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/88ece442-8f41-38eb-bbac-573ccd14cd27.roa
File:                     88ece442-8f41-38eb-bbac-573ccd14cd27.roa (raw, json)
Hash identifier:          QDSBR2aIfxcBVPNIhVy49ZPFYeCY9LNaYe5ntfYREho=
Subject key identifier:   DF:DC:34:8D:68:72:A1:11:1A:6F:FB:34:34:A2:6A:B5:41:F6:EE:F2
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4E6694EBFE9034A11A300
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/88ece442-8f41-38eb-bbac-573ccd14cd27.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14618
IP address blocks:        2620:147:c43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e6:69:4e:bf:e9:03:4a:11:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=f7229b8f-5065-4386-9e4b-9f7fad0ad190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:0a:e7:0d:0f:18:70:bd:5a:cc:73:4d:9e:
                    d9:3f:3d:f2:48:07:bd:8d:13:49:94:05:0a:4d:16:
                    44:42:de:37:46:65:5a:e8:fd:ea:fa:ed:40:35:3e:
                    02:1a:99:3c:04:59:69:0e:47:59:f7:29:5f:80:14:
                    19:ea:c6:e8:dd:ae:ac:2e:5c:d0:6a:31:33:57:75:
                    2b:66:79:36:c5:f9:f3:64:1d:40:fc:69:f8:9d:48:
                    85:12:f0:a5:2d:59:a7:55:49:7f:1e:a2:ca:44:44:
                    55:54:f6:12:ae:76:03:6f:11:3d:a7:75:51:3d:62:
                    d6:0d:b5:5e:6d:9f:01:43:44:66:be:8f:1d:49:c5:
                    ea:6e:a4:24:3f:0e:d4:84:7f:2c:2c:a6:44:aa:6a:
                    dd:c4:98:e0:ba:ac:5e:71:df:17:90:6c:2e:88:1a:
                    00:4f:85:10:77:f5:19:ec:8b:9d:fc:3a:cb:31:96:
                    34:e0:4e:da:41:17:22:f1:a2:f9:35:ef:0e:24:2b:
                    00:59:99:3c:55:0c:37:14:12:86:56:a3:85:04:34:
                    7b:ec:63:e8:09:e7:75:db:eb:e1:c2:a0:07:c1:fa:
                    c2:8c:74:e8:50:de:e4:49:38:70:c4:3e:b5:8c:08:
                    2e:dc:a5:15:9d:72:54:40:76:0c:ce:7e:e2:88:fc:
                    81:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DC:34:8D:68:72:A1:11:1A:6F:FB:34:34:A2:6A:B5:41:F6:EE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/88ece442-8f41-38eb-bbac-573ccd14cd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c43::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:70:b7:9f:f9:24:82:1f:1d:4f:0a:98:b4:6b:60:7d:a5:dc:
         64:86:76:78:18:19:35:78:b7:cf:46:a5:ee:32:88:cb:92:85:
         d4:23:6c:8a:34:c8:5a:6e:34:7b:87:86:c7:fd:32:7e:96:80:
         97:83:ee:fa:9b:57:90:f6:fb:f3:44:a4:d9:9e:a1:e2:44:3c:
         d0:78:bc:9d:ff:1f:e1:e7:18:fc:55:51:36:ab:6b:79:f1:ba:
         55:bc:18:48:51:60:90:74:08:15:f0:5a:dd:49:5b:f4:69:27:
         a8:76:1a:fc:5b:81:1e:4e:4e:45:b7:67:93:f5:e5:96:5d:28:
         a7:aa:0d:ed:16:58:ae:22:aa:21:56:9d:39:c1:d8:3a:d7:b5:
         92:73:be:31:37:f1:3d:47:b1:9e:b4:8b:b2:ef:59:17:53:61:
         d9:93:d1:49:28:44:1f:de:61:5c:67:e6:08:d0:30:a3:34:43:
         e7:5a:51:d1:b9:9b:ed:cb:71:e5:7b:9f:19:fc:20:82:f5:01:
         9b:5c:15:ce:c3:69:a6:09:d9:b9:7d:5f:0f:ce:98:98:1e:cd:
         3f:4f:da:57:2f:5d:83:5d:77:76:00:84:b2:fc:7d:0c:19:fd:
         bd:0e:7d:73:27:86:b5:8e:5d:f3:91:8f:be:f0:c8:4e:1e:d9:
         78:25:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:59:47 2026 by rpki-client