Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b35aae01-2236-393d-b45c-d715c25a60b0.roa
File:                     b35aae01-2236-393d-b45c-d715c25a60b0.roa (raw, json)
Hash identifier:          CQylN5bxkPwBRtYsJ6XCrmk6mtrjJzL097RwWGeE+S4=
Subject key identifier:   75:73:E4:D6:7B:88:58:B7:50:BF:70:E7:7D:11:F8:42:D0:15:BB:6E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EA793B0CC5DA18954E47D6558
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b35aae01-2236-393d-b45c-d715c25a60b0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22616
IP address blocks:        2605:4300:e700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:b0:cc:5d:a1:89:54:e4:7d:65:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c05128fd-bb17-45fc-889b-a908a3003d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:6e:6f:71:9a:7f:b1:62:36:6d:23:9c:9f:
                    be:71:ab:51:5a:0f:8e:7a:23:05:6f:f0:fe:03:b0:
                    fe:7a:ee:d6:b2:5c:46:c7:9b:43:9d:3c:2c:c1:d0:
                    45:35:b4:54:77:4a:4f:5d:33:25:1e:25:44:7e:6e:
                    fc:97:dd:39:93:76:65:4d:c2:20:17:db:ac:b3:2c:
                    a3:2a:fe:4d:dd:8d:fe:0b:6a:76:d4:ad:fd:75:c9:
                    8c:50:71:d6:fe:26:4f:9f:78:d8:65:c3:23:1f:1b:
                    4e:63:b7:2c:17:31:21:57:4f:dd:be:a4:44:69:4d:
                    8e:ca:d9:44:8c:dd:a4:ff:7a:e1:1c:50:ed:00:a0:
                    31:90:c1:88:d5:84:f2:0d:95:e4:78:c2:08:de:1c:
                    6e:42:f4:69:4d:f1:7a:b0:69:fd:6c:59:b0:44:df:
                    7b:11:33:97:aa:7e:28:f7:d4:a4:67:e9:d5:2e:c9:
                    3c:f9:57:85:fa:93:32:1c:53:f7:93:d2:0b:4e:fc:
                    07:20:24:0b:40:ae:bb:eb:c2:76:ac:9a:9f:7e:58:
                    b8:be:2f:7f:1a:dd:dc:7a:d2:06:dc:bc:b6:94:04:
                    01:5e:30:59:41:27:18:cb:ff:64:a1:a2:f6:cd:e0:
                    dd:09:56:be:c6:e2:49:29:51:df:e6:04:f9:4e:dd:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:73:E4:D6:7B:88:58:B7:50:BF:70:E7:7D:11:F8:42:D0:15:BB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b35aae01-2236-393d-b45c-d715c25a60b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:e700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:94:2b:58:39:15:51:86:f6:86:2b:7a:a4:59:b9:0b:cc:90:
         c0:94:9b:95:9d:4c:dd:4a:5e:75:4c:18:92:84:23:37:d2:43:
         f6:be:aa:c9:f7:77:1a:c6:70:a5:ff:39:26:7f:07:f9:4e:15:
         24:66:2b:25:f9:c2:d4:ac:1f:4a:9b:8d:d9:85:5b:2f:45:d3:
         0f:80:3d:31:4a:e5:7b:63:21:37:ed:93:8c:06:39:60:87:05:
         bd:38:20:f3:5d:77:78:ab:0d:3b:7f:35:21:22:59:8d:1f:2c:
         50:cb:bc:16:c1:13:dd:d8:ef:1a:45:2b:bf:3e:2d:52:1b:47:
         46:9f:02:7e:ad:2a:c3:54:4c:2a:f5:52:d1:bf:8e:18:d1:a1:
         2f:5b:d6:35:9a:0a:b5:04:30:6b:c6:30:9f:94:70:0d:3a:e8:
         4c:a3:eb:eb:24:58:79:05:c9:ed:44:37:13:0e:8b:0f:50:87:
         a1:4e:f0:32:f5:c7:56:f9:63:ff:52:d3:d2:26:92:49:a8:22:
         f2:9a:38:0c:1f:87:3b:49:d2:a9:28:0d:0f:cd:f0:b4:4e:bb:
         96:94:b6:d9:df:d3:9a:96:0f:db:e4:19:5f:64:93:26:bd:22:
         ae:24:09:6d:17:2f:7a:8c:dc:b8:16:47:01:1d:04:8c:02:10:
         1a:19:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 01:12:47 2026 by rpki-client