Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa
File:                     229f4872-a0da-399b-9864-155c7c46ff10.roa (raw, json)
Hash identifier:          sfz2Mj/iMzQo5Cb3904UviL456+VyNenlZVdXAEvuxc=
Subject key identifier:   37:D9:49:C9:39:44:4D:03:17:2C:D7:8D:F0:EB:63:49:C4:B3:EC:44
Certificate issuer:       /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial:       010D0C9F4328584A90A0BEB43B817283C32E2880
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     11426
IP address blocks:        2620:7:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:be:b4:3b:81:72:83:c3:2e:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=1beeeb8e-3f37-4386-bf85-395369fa8e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:32:e5:7d:2b:1a:ee:fb:5d:e7:c3:85:43:
                    f6:bd:56:34:d2:3d:b8:a3:97:3f:1a:9c:2f:c1:ab:
                    60:6d:d9:9e:54:1c:3b:89:37:f8:b2:09:d9:0f:9c:
                    fe:84:6f:49:7f:c1:d5:03:66:bc:e8:97:92:92:d3:
                    c3:67:28:e3:bf:89:56:02:e0:b5:62:9b:ec:e9:a3:
                    f7:38:69:5c:90:32:ee:96:48:92:45:a8:5a:75:76:
                    5c:5b:d6:8a:26:ee:f7:47:43:b4:66:2e:19:6d:3e:
                    f6:47:e2:a4:e9:4a:b8:c0:58:e7:38:9a:9a:32:14:
                    ed:ee:6a:9d:1a:9f:63:c8:d2:9d:40:26:94:fe:95:
                    15:c3:0d:da:46:e1:e1:40:d3:85:40:37:3d:2d:3b:
                    40:4a:24:bd:83:d6:fa:51:be:5c:68:cc:44:16:7c:
                    bd:6e:bd:58:35:95:7c:42:87:c1:18:a6:4b:73:0e:
                    03:11:11:e0:81:31:3b:1d:0a:c5:61:3c:01:ab:6c:
                    14:b4:1e:66:18:76:64:ac:9a:1b:ea:c8:f6:0f:32:
                    a7:6c:7c:57:b5:c1:f7:e1:93:8a:2c:a1:04:b5:d5:
                    9d:70:5c:39:1f:23:05:55:b9:6a:e2:42:25:b0:5a:
                    dc:e9:aa:56:75:0d:3a:85:e3:17:83:1e:2f:7a:d3:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D9:49:C9:39:44:4D:03:17:2C:D7:8D:F0:EB:63:49:C4:B3:EC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:2c:12:dd:73:b0:73:60:95:03:d0:2c:9a:81:08:c9:ad:
         bc:3d:b4:69:ca:17:47:d4:72:f5:c1:6d:37:74:3d:8c:5f:68:
         2f:25:34:2f:4b:a5:46:7f:96:2e:3e:95:49:ce:83:b8:03:2d:
         27:ed:12:7f:e1:8e:08:fa:37:4c:c7:d0:37:81:b3:ba:4f:d7:
         42:36:e4:42:77:dd:b1:9d:b3:e7:cd:e5:f9:f0:a4:89:92:0c:
         a0:a5:ea:54:6d:cb:bd:2a:33:3e:48:1a:d3:de:aa:81:0c:c1:
         0f:bb:5a:d2:b2:59:3c:b1:6e:2a:56:38:27:88:b4:62:e1:74:
         b3:0c:ff:9f:97:24:93:bd:d9:d6:bf:65:a5:e2:fe:dc:6f:53:
         e7:dc:ff:e4:f0:e5:19:53:eb:0f:e6:11:e1:93:5c:14:24:b8:
         e0:ee:26:f0:dd:29:5f:99:45:97:3b:cb:e7:65:af:e2:72:3b:
         e8:3d:72:36:13:d9:21:46:80:14:cc:69:be:15:d0:50:f0:99:
         9a:21:48:5c:af:11:ec:f0:14:63:9f:26:da:67:4f:e7:b3:da:
         cf:00:b4:de:9d:e2:6a:0a:31:17:0b:8c:8f:65:70:89:9a:84:
         39:76:22:4e:ba:71:bf:94:64:0f:79:5b:0f:c7:ea:12:05:79:
         19:69:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:11:31 2025 by rpki-client