Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/61395257-be0f-3827-8aeb-fcd485efab94.roa
File:                     61395257-be0f-3827-8aeb-fcd485efab94.roa (raw, json)
Hash identifier:          UJYf+KyqxRtwSghcJWRWZM7STUXmXLVV5o5uQKPZrHE=
Subject key identifier:   DF:F2:3A:ED:57:37:E6:44:B1:0F:2B:74:F5:2B:17:85:C4:68:30:51
Certificate issuer:       /CN=0f75debb-24cd-4c8a-a64c-c330e9155a20
Certificate serial:       010D0C9F4328584E69CD37B94CF3F6DB221E0480
Authority key identifier: 8E:6B:5F:03:34:6B:7A:F8:9D:F7:9A:FB:19:02:98:FB:71:0C:FA:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/61395257-be0f-3827-8aeb-fcd485efab94.roa
Signing time:             Mon 06 Jul 2026 22:21:53 +0000
ROA not before:           Mon 06 Jul 2026 22:21:53 +0000
ROA not after:            Sun 04 Oct 2026 22:21:53 +0000
asID:                     33152
IP address blocks:        2607:f768::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/0f75debb-24cd-4c8a-a64c-c330e9155a20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/0f75debb-24cd-4c8a-a64c-c330e9155a20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:cd:37:b9:4c:f3:f6:db:22:1e:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f75debb-24cd-4c8a-a64c-c330e9155a20
        Validity
            Not Before: Jul  6 22:21:53 2026 GMT
            Not After : Oct  4 22:21:53 2026 GMT
        Subject: CN=3e79819c-3561-4610-9cee-2775bfb57e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:e9:64:39:5e:71:6a:0f:39:67:69:46:f6:
                    8c:e9:cc:56:96:64:af:79:d3:20:11:f7:be:01:08:
                    e4:59:18:5f:e9:13:29:3c:5a:5c:88:89:1c:a7:d1:
                    1c:b5:b9:bc:80:d7:04:48:8e:12:74:72:f8:c5:28:
                    2c:02:4e:77:c0:1d:d5:f8:0a:8b:44:f1:0f:a9:bd:
                    77:f3:76:66:03:24:f6:39:a4:95:9b:f8:de:68:ef:
                    61:b7:a7:62:71:51:4a:d3:f8:1c:6b:65:3b:06:78:
                    c4:d1:48:23:92:0c:a3:19:1c:16:8b:bc:aa:c4:74:
                    fc:d8:ae:ed:ff:ad:f2:de:6b:8d:ed:b5:85:49:f6:
                    b4:ac:81:7d:04:5d:c7:b4:4f:1e:56:ee:29:f1:99:
                    63:6e:8f:9d:38:bf:aa:9f:3b:61:d4:9e:db:d9:ce:
                    ae:cb:c5:8f:28:1d:07:ef:9e:39:23:9c:a4:06:94:
                    a4:b9:69:8a:14:9d:f5:23:09:de:17:fe:52:6c:e6:
                    4c:ae:98:bb:9c:96:79:92:92:a2:d3:f6:2b:a6:6e:
                    d8:02:3a:66:6d:0b:98:d1:73:9a:fb:8b:95:3c:43:
                    d8:04:5e:3c:43:31:a3:a6:bf:de:1a:41:41:c1:0b:
                    c0:97:c6:f1:22:db:6e:2f:a2:f1:01:98:1c:f8:92:
                    cc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F2:3A:ED:57:37:E6:44:B1:0F:2B:74:F5:2B:17:85:C4:68:30:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/61395257-be0f-3827-8aeb-fcd485efab94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/0f75debb-24cd-4c8a-a64c-c330e9155a20.crl

            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:03:34:6B:7A:F8:9D:F7:9A:FB:19:02:98:FB:71:0C:FA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f768::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:5d:a2:57:27:5c:c1:6a:d7:52:06:da:c5:13:1e:cc:62:
         b0:62:0f:33:9a:7b:7a:1d:9e:29:fd:97:bf:20:52:68:01:2c:
         f3:21:81:00:e6:94:20:58:e3:5d:9d:49:68:c7:61:59:1a:00:
         e2:be:a5:88:d1:a1:b7:1b:87:6d:76:18:46:c6:b2:d4:41:7e:
         c0:21:79:52:1b:af:03:b7:75:da:ad:17:c7:6c:3a:3b:ad:01:
         4e:67:34:50:46:c7:05:5f:a1:24:d2:f1:4c:2e:c5:3d:0a:f9:
         f7:d7:4d:86:db:21:8f:14:8d:e8:44:67:00:c1:3b:89:e1:4f:
         8f:62:ae:c4:3e:31:29:d2:a1:f4:ce:b2:14:8a:58:e6:1d:36:
         89:46:69:c1:cf:ae:eb:30:6d:66:cc:ea:f1:aa:43:40:ce:34:
         71:9c:86:8c:9f:9c:1a:ba:84:95:4b:4a:5e:29:c9:2b:7d:b3:
         24:3e:74:ab:75:10:e5:8e:99:bb:c9:5a:ac:03:ee:36:8a:b4:
         f8:4f:fc:f6:e9:1d:8f:a9:15:cd:c8:90:42:2e:1f:73:92:a5:
         d7:75:d5:83:2e:bd:c2:1b:10:75:ec:b7:4e:7b:b9:cf:93:29:
         a9:40:0d:24:3d:42:79:c7:f3:14:b8:2b:a2:a2:dd:be:92:f4:
         c5:8e:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:32 2026 by rpki-client