Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa
File:                     de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa (raw, json)
Hash identifier:          dX/5kaie/GDf+f8YoVo1oeMAvugJURHKSy9m1t9QI6U=
Subject key identifier:   EF:4D:83:05:2E:0D:31:2C:BD:D1:3B:4F:72:53:58:F3:47:AA:7F:F8
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584E8C8A4AC3A5A346F0BAF37760
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     400618
IP address blocks:        2607:8140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4a:c3:a5:a3:46:f0:ba:f3:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=954e918a-3cf3-4a32-9e6f-db708b428e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:11:63:9a:ae:93:e8:65:3a:aa:55:61:b9:57:
                    07:1c:6a:62:8e:78:34:c6:d4:b4:8a:f1:a4:36:3d:
                    09:24:e9:d9:cd:17:95:f0:0e:bd:bd:0d:99:f6:58:
                    0a:07:65:39:bb:8f:cf:d8:eb:ef:cc:08:ea:ad:94:
                    d5:a8:97:9c:e2:a8:b8:3b:32:91:2e:86:d1:e0:81:
                    e4:78:33:e2:9f:58:65:36:f7:11:2a:1c:93:ef:72:
                    36:7e:b4:0b:97:81:d3:81:98:13:ce:96:17:8f:b0:
                    9d:f9:aa:92:9d:9f:34:41:29:99:43:0d:8e:e8:f5:
                    1a:0f:9c:e2:38:10:d6:61:5f:f5:3d:9f:72:fa:94:
                    73:b2:77:ff:e9:36:cf:d1:82:9e:e5:5a:ad:fa:9a:
                    79:a5:6a:34:e8:99:d9:2c:0d:ee:58:7e:08:33:ba:
                    e9:6c:be:5b:93:7b:2f:35:52:21:f1:c6:9e:d7:af:
                    68:92:9e:5d:e0:43:09:05:67:3f:0e:39:a9:a4:86:
                    63:21:6f:b4:21:a6:cc:37:ba:8c:f1:d1:62:da:9d:
                    7d:61:58:2b:17:0a:a6:bf:37:95:be:d9:ff:f4:ba:
                    b2:8b:71:43:77:af:90:2d:72:fd:6b:5f:01:02:d0:
                    b7:3f:fd:c0:50:f8:9e:25:57:91:60:62:35:96:d3:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4D:83:05:2E:0D:31:2C:BD:D1:3B:4F:72:53:58:F3:47:AA:7F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:58:b1:21:83:72:3c:64:d8:6a:db:f0:be:18:f7:85:71:
         eb:7a:19:0b:89:ee:6b:28:8b:8a:4a:b5:e2:54:6a:39:25:c0:
         cc:4e:c5:67:44:4d:b3:93:7f:bf:9d:56:fc:e8:90:0a:38:ff:
         da:96:15:56:23:49:75:43:2b:3e:22:4c:88:c7:2a:bb:27:a8:
         c6:e4:fc:9a:8a:1b:07:7d:d4:ca:ae:c0:58:71:04:30:b9:69:
         f5:4d:88:a1:03:29:65:ff:d6:a6:87:7e:e5:c3:fe:6d:a1:24:
         ca:11:1c:84:20:58:90:ca:62:f0:49:dd:20:e2:58:9b:49:9b:
         c7:df:78:fd:73:f2:ba:7a:5d:f9:48:6c:20:eb:fe:95:f2:0d:
         64:00:ab:6f:a4:bd:eb:81:7a:16:59:e2:fe:15:a2:de:dd:a3:
         6d:c7:94:c0:d5:72:dc:f5:39:7a:ba:29:16:8f:ce:0c:a2:ae:
         7a:b5:55:11:36:17:df:07:25:88:96:51:39:d2:0d:fb:a4:3e:
         91:a9:bc:93:9c:ca:2e:bc:49:03:0e:d6:cd:1a:b7:b8:cb:4a:
         7b:be:c3:5e:d5:f2:70:74:8f:0c:e6:e8:8f:87:fe:d5:22:9f:
         16:44:c8:c4:ef:cd:ad:78:dd:35:49:26:06:36:ae:0c:ea:34:
         7d:6e:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:33:19 2026 by rpki-client