Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa
File:                     f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa (raw, json)
Hash identifier:          +1kj6zw+4MUzZFDW1RZmhuRQY/HdxL0SLYIs+Yhv4gU=
Subject key identifier:   F6:E9:5A:87:BA:88:E0:0C:2E:96:67:8F:CD:8A:59:70:01:74:7C:8E
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584E736A26101169C75ADD26F480
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     397994
IP address blocks:        2620:a0:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:26:10:11:69:c7:5a:dd:26:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=c893c415-e5f5-477f-b5cf-303b8e5b13f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:42:74:a8:56:f0:97:c1:27:5c:25:f9:c3:bc:
                    49:9a:08:98:81:5d:38:05:3d:f9:9f:24:27:cc:94:
                    52:16:49:99:7b:f7:3a:50:da:fc:da:d8:9b:a4:05:
                    8b:87:2e:6f:76:6d:cd:ad:74:a8:9a:e2:3c:a1:7b:
                    c3:e0:07:43:66:d0:ea:db:b8:e2:31:55:b8:45:db:
                    2c:eb:97:51:18:4e:08:d8:f6:3d:79:84:be:7a:96:
                    09:7b:26:ec:64:ec:b3:7d:6c:99:1c:17:25:a4:12:
                    b6:da:30:66:4b:12:fb:d3:54:08:58:2e:9b:66:2f:
                    b5:24:d4:f1:ee:54:6f:09:d5:28:de:56:1d:fd:fd:
                    70:b4:2a:b0:db:fd:2a:95:55:b5:a5:56:bd:a9:54:
                    0d:54:ed:1d:0f:fa:60:fa:56:98:c1:46:4b:57:75:
                    0b:91:b1:98:49:66:5c:46:43:60:3c:b5:03:8f:ad:
                    61:15:db:d3:27:ff:16:35:d2:4c:1c:72:78:6d:49:
                    7f:6e:c0:8d:1d:c6:d1:74:99:06:96:b2:6f:6f:b2:
                    34:09:8e:3d:ab:81:4b:15:47:e9:9a:70:45:ef:35:
                    5f:32:ac:2b:be:31:32:a2:ad:f2:f5:91:a9:10:d5:
                    41:3b:f6:e4:a2:36:b0:76:b1:d4:43:e3:a1:87:bc:
                    9c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E9:5A:87:BA:88:E0:0C:2E:96:67:8F:CD:8A:59:70:01:74:7C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:1c:2f:91:56:7f:c8:84:59:57:77:6f:38:f6:9e:ed:7a:
         83:fd:be:48:bf:1a:ea:1b:70:64:6c:e4:0e:76:5f:db:a2:59:
         61:40:5e:73:3e:12:be:72:5f:bb:ac:8f:6a:f6:53:52:32:a5:
         56:5f:20:bf:78:08:8f:63:fa:d0:41:0c:10:a6:00:fb:53:8e:
         96:59:95:3a:45:01:21:90:bf:8b:fb:00:02:c0:2f:db:c0:ab:
         6c:e8:40:a4:d6:07:88:0c:63:31:70:4c:c5:6c:e1:44:ed:79:
         f4:dc:9c:15:6b:f8:09:84:92:f2:02:03:8d:85:bd:7d:41:c2:
         47:3c:fe:6e:cb:b5:86:7b:86:61:1d:c5:9c:83:50:41:0d:d7:
         98:7b:de:5c:9b:33:35:0e:d2:cc:d9:73:d3:b6:4c:ee:b4:2b:
         7e:6a:2b:5c:e9:69:96:fd:e1:6c:ef:0a:16:a7:9e:be:a2:cc:
         22:5b:31:34:f6:57:70:7b:ea:fe:bb:5d:45:3a:17:a7:a7:de:
         79:e6:0b:cb:46:fa:57:b0:68:42:95:c9:15:75:5c:77:19:ef:
         25:2b:be:d3:8e:25:a6:f5:9d:e1:c9:90:57:d1:a6:6b:30:f5:
         17:77:5b:d8:51:9f:88:1a:eb:f0:f0:14:de:f8:57:5b:fd:67:
         d1:86:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:29:37 2026 by rpki-client