Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa
File:                     2d066b72-4060-30eb-b5ac-a6583c7d483d.roa (raw, json)
Hash identifier:          PyOXu3voecznGvLq1qZJfCHr0VA3fK3TXanqDAECVTQ=
Subject key identifier:   79:F2:DD:B2:54:3F:D5:6C:65:AB:64:9E:FD:82:CB:E5:B7:64:4B:2D
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DF640A4C9B1E6FFC17249D700
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     11055
IP address blocks:        2604:7a00:ffc0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a4:c9:b1:e6:ff:c1:72:49:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=d120655f-393d-4aa3-b87d-fce9b791a8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:ab:73:ab:94:82:b0:2c:0c:36:fd:27:f7:
                    b0:71:ec:5e:fa:cd:15:95:86:65:99:60:b4:10:37:
                    8d:a3:9f:da:69:99:64:ed:6d:5a:21:7d:54:85:70:
                    ee:66:d5:1f:20:66:98:45:e1:52:a2:42:fd:66:d1:
                    c9:6e:16:95:b5:e1:ab:75:d7:a4:12:8d:2f:17:4c:
                    b1:98:f7:65:98:26:09:d7:1a:27:df:ce:81:59:d4:
                    20:d3:c4:1e:39:27:ac:f8:09:42:73:43:e9:01:1a:
                    50:46:ed:69:21:87:3d:b7:3f:73:53:31:f1:a1:1e:
                    eb:eb:60:46:16:a9:9c:d2:6a:32:5f:76:8f:51:a0:
                    eb:c6:47:c0:d7:a3:0f:5f:3c:61:45:58:d0:45:df:
                    f3:be:89:5c:d4:65:bb:70:dd:d7:ff:cf:d8:53:49:
                    e5:50:cd:cf:15:dd:de:f6:d0:9a:04:22:6a:aa:56:
                    56:d4:fa:8d:e5:1e:b0:70:4f:d6:b5:e9:9d:18:db:
                    02:df:0c:32:51:3e:5f:2e:39:a9:42:15:e8:9b:e1:
                    ac:7d:01:5c:91:8a:dd:22:03:2e:fd:9d:d6:54:cd:
                    28:48:fd:ba:f4:92:30:dc:94:5b:43:0f:48:1a:b4:
                    05:33:bb:c8:52:c6:cf:c3:44:b3:61:c9:c6:a0:75:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F2:DD:B2:54:3F:D5:6C:65:AB:64:9E:FD:82:CB:E5:B7:64:4B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ffc0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:48:91:f7:6b:cb:af:3b:a7:e8:13:d9:ec:63:80:00:d4:
         09:02:72:24:c4:8f:1e:69:45:e7:bd:27:ce:4a:ed:4a:7d:35:
         9e:32:6e:fc:05:25:8a:c4:c8:b9:ef:d5:25:45:40:fe:cb:2f:
         8f:6f:06:f0:df:34:63:ce:1c:89:26:b2:5a:6b:7e:40:85:0e:
         8d:5d:ee:b0:86:6d:22:ad:a9:3d:88:bf:65:1e:29:b0:74:5d:
         55:2b:f1:0b:26:fc:9c:e3:71:c0:ec:c3:65:8c:3b:b8:fd:67:
         78:5b:02:b0:8a:32:00:65:87:1c:f7:94:c0:be:49:66:3e:35:
         c0:52:1d:00:5f:ea:fa:70:f4:8d:b7:23:3d:2b:55:eb:bb:ff:
         0d:be:8b:ca:76:77:26:3c:93:a1:2c:6a:7b:ed:86:4a:fa:47:
         16:72:45:31:43:e1:64:57:91:e3:ac:fa:b3:9d:fe:f0:42:cf:
         3b:96:a1:0e:1a:0d:13:07:67:97:18:16:71:af:b6:12:ee:7e:
         80:a6:e4:af:ea:46:81:59:2f:53:27:cb:de:30:01:a8:90:21:
         f7:72:2c:a7:65:ba:1f:5c:54:de:7d:70:56:a4:80:49:ea:1e:
         7e:db:68:9e:bd:2e:1e:f7:8d:e6:b3:33:ef:00:18:90:a4:8a:
         2b:c5:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:50:43 2026 by rpki-client