Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa
File:                     2e7fedc6-4231-3453-9c5a-bd24e5304959.roa (raw, json)
Hash identifier:          C8OyTtwgFrTuoUWDWyEEWwa1GiFpHxeriBarrs0EPFA=
Subject key identifier:   6C:C1:BC:E7:8C:98:F3:4D:36:E1:F8:F6:9C:52:A9:4F:AF:FE:51:5E
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584E4AEF40A7AF0CFB56F3D20100
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     64269
IP address blocks:        2604:28c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:40:a7:af:0c:fb:56:f3:d2:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=fc78a66b-5cc5-4668-a657-8883108f66fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:67:26:04:ce:57:73:a5:59:e0:9f:af:59:
                    90:f7:cd:85:78:95:ce:12:bb:83:b6:db:ec:2c:9e:
                    77:65:04:13:fd:80:56:50:0e:cb:18:d2:f2:10:43:
                    c5:f0:cd:d1:b5:c3:69:13:cb:48:8c:d2:97:fc:24:
                    9d:e9:ee:4f:71:0c:e3:b7:3d:c5:17:12:f9:39:40:
                    65:6c:66:17:95:29:0a:da:06:70:55:d6:09:e6:7b:
                    ba:a3:91:e1:5e:52:23:83:b2:5f:8d:eb:57:31:38:
                    50:23:e6:42:e9:54:1b:ba:ec:98:1b:65:de:bd:95:
                    5f:89:cf:ab:3d:1f:d0:0a:72:9b:16:31:a3:a6:7b:
                    45:66:aa:33:02:ff:19:f4:93:b8:0c:44:e9:1b:2c:
                    ac:8d:ae:c5:6e:dc:95:92:9d:15:1a:d6:22:04:28:
                    eb:ea:37:ae:22:7d:d7:d5:d0:f8:2d:da:f2:9a:8e:
                    88:5d:f1:93:f8:b3:49:55:84:57:d5:43:9c:ed:a2:
                    54:44:fb:a4:9a:07:b9:d0:82:b5:af:66:cf:de:85:
                    35:13:c9:3b:c1:df:18:a8:c0:b3:40:9d:66:69:00:
                    63:1c:c4:1e:ce:8a:85:54:bc:cb:21:67:92:99:ef:
                    cf:f1:83:88:41:54:85:d2:96:3b:d5:92:fb:01:96:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:BC:E7:8C:98:F3:4D:36:E1:F8:F6:9C:52:A9:4F:AF:FE:51:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:28c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:be:42:0b:37:00:62:d3:2d:f6:d9:1f:10:74:c0:d7:da:6f:
         16:a2:bf:e2:2f:29:c6:75:0e:f9:19:9b:2a:8b:b3:00:d1:8b:
         b8:5d:df:41:8c:b9:85:f7:f2:11:5a:72:b6:a3:55:f8:ca:77:
         d6:f7:41:f5:37:a0:4a:f9:f6:dc:1b:0f:51:fc:cf:65:79:01:
         aa:3e:9c:ec:03:e5:aa:c8:7c:60:77:30:39:ae:da:fe:ea:19:
         9a:af:6f:cd:d7:0c:fc:06:7e:e6:46:10:a0:a9:b8:02:82:80:
         89:1a:ad:88:54:6b:1e:92:c0:c4:67:72:1d:e3:f7:11:60:4a:
         67:de:1a:1d:57:0b:b1:42:bd:b6:5f:80:14:9a:23:2a:b8:0a:
         e3:fe:9d:6b:2c:c4:6e:57:62:c2:13:5b:cb:ed:29:17:13:7c:
         f6:14:18:5e:c1:70:0f:d7:8b:6e:34:5e:7d:8e:2a:fc:56:2f:
         36:24:68:6d:6c:e7:91:35:4f:d4:1f:cd:79:98:18:ad:fd:0b:
         9b:9e:91:fa:95:eb:1c:5d:a6:a6:4e:ce:be:f6:3c:53:06:48:
         9c:35:5f:c6:6c:15:e3:36:83:3a:5d:cc:fa:3c:46:f5:0a:70:
         71:d6:b5:b6:39:ea:5d:80:75:7b:03:59:1e:5a:51:44:7e:ac:
         97:b4:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:53:27 2026 by rpki-client