Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
File:                     bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa (raw, json)
Hash identifier:          ni02NLFlFaYHWm2meFs2h762gKD5TbS6E7QOh4xpeFA=
Subject key identifier:   C6:53:2D:78:4D:5A:00:1C:BE:8D:31:AA:A6:11:EB:CE:7D:D1:ED:7A
Certificate issuer:       /CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
Certificate serial:       010D0C9F4328584D1F4A42AB984C85B26E929980
Authority key identifier: 6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     11711
IP address blocks:        2607:f068::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:42:ab:98:4c:85:b2:6e:92:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=76ab4945-d78b-42c3-aa36-5a6b4b96e57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:bb:02:be:d9:bf:a6:13:d6:5b:fb:4c:31:
                    3c:50:8f:64:3b:93:40:71:19:aa:4d:6b:21:a4:5a:
                    d5:49:2e:46:26:22:4f:36:77:9e:46:c3:7c:81:c7:
                    20:49:bb:7a:8a:bd:b9:79:fc:e6:59:29:6f:d5:e1:
                    26:d6:3f:de:70:c5:67:e1:c4:0f:9e:41:19:6d:b7:
                    be:f2:97:cf:1c:fb:64:91:f2:ec:76:45:1e:3d:26:
                    0f:7b:ad:34:11:1c:ae:0d:79:30:5c:a7:9d:96:13:
                    10:6c:92:00:71:17:a4:0e:d0:9b:7b:f0:98:61:e7:
                    da:05:93:fc:dc:22:3f:89:21:8f:ce:4a:57:e8:ab:
                    8e:db:ed:81:c7:96:1e:7c:f9:f1:e2:f4:76:05:e6:
                    97:f5:26:59:19:3b:4e:fa:4a:2d:ae:cc:af:48:65:
                    70:06:9d:28:72:3e:5e:86:1c:ca:dc:29:fe:15:5d:
                    8a:3c:17:d8:8f:fe:0a:4c:3e:8d:fe:45:99:4e:27:
                    89:48:85:3f:18:09:1b:0c:a0:df:95:0f:bf:ca:47:
                    f3:17:58:f4:86:fb:db:1a:d4:c2:bf:7e:9c:99:5e:
                    67:3c:b8:8f:ff:48:a2:34:0b:75:e9:be:e4:e6:2e:
                    18:2d:c1:fc:ba:ca:99:d9:99:59:c4:55:99:a4:9d:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:53:2D:78:4D:5A:00:1C:BE:8D:31:AA:A6:11:EB:CE:7D:D1:ED:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f068::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:07:1e:a1:a5:ae:ef:52:59:b0:b3:33:c1:7f:bd:a6:cc:cd:
         22:1f:d6:06:9f:e7:5b:f2:cd:77:be:f0:63:f4:f7:53:30:d5:
         af:0b:0c:e1:23:29:74:4f:53:29:5c:5c:3e:1d:a8:85:53:76:
         b7:e7:e7:b4:63:af:b6:57:cc:ec:95:38:3b:98:f0:5e:a0:5f:
         28:b1:42:98:99:3d:af:94:3c:fc:df:0f:b9:ea:f2:f5:82:a4:
         5e:cb:0a:a2:12:25:c4:35:d3:b0:81:39:97:20:f1:56:0b:7d:
         3a:f1:a4:cc:ed:b9:72:d0:1a:8c:f4:44:82:73:33:cf:7b:92:
         db:0d:14:42:7f:1b:2d:33:21:88:06:22:25:ac:77:ab:dc:f3:
         2c:0f:2e:7f:1f:f4:be:7d:d1:86:c8:6b:5d:a9:38:49:b0:32:
         26:e3:ad:65:05:14:b9:10:9b:18:12:61:d5:7e:20:68:54:ec:
         68:b2:ff:9f:43:0f:04:56:eb:6b:74:a0:cb:d2:e7:c7:fa:fe:
         cd:3d:26:52:ad:ac:23:00:ae:15:f0:e9:f0:63:a6:0e:28:a1:
         54:62:3e:13:a4:51:fa:12:11:57:52:cb:dd:ef:a8:28:e1:d9:
         d6:b9:52:5b:8a:f6:9c:48:ff:60:71:8d:84:cc:58:6f:8d:7c:
         87:e2:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:01:00 2026 by rpki-client