Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/a94dd26b-2af7-3846-8733-909194b7fd83.roa
File:                     a94dd26b-2af7-3846-8733-909194b7fd83.roa (raw, json)
Hash identifier:          OdbJFPnh3RGUJg/fhgEb8dE1SoIBZdU/i+1gasgaIhI=
Subject key identifier:   84:34:26:FF:CE:CD:E2:A8:78:64:D4:1F:1C:FD:3D:26:41:80:CA:CE
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584E4129D7D9B885D775E2D43598
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/a94dd26b-2af7-3846-8733-909194b7fd83.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     32771
IP address blocks:        2620:111:8006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:d7:d9:b8:85:d7:75:e2:d4:35:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=427b9e8d-2ce3-4e09-9039-6e872fb48ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:21:11:a9:45:36:fa:68:30:58:69:26:4a:
                    0a:10:81:ad:18:33:b3:a6:4a:e8:e7:71:d4:97:8b:
                    7f:12:e2:3d:57:6c:03:ee:cd:02:f3:9e:01:f1:ba:
                    d8:dc:cd:c9:37:fb:ea:9e:16:03:14:55:dd:c0:d8:
                    33:f8:6b:6a:cf:f6:d6:5c:37:e5:5c:69:94:bc:a7:
                    5c:ed:db:18:74:08:75:83:83:38:74:ee:40:3e:58:
                    c1:76:ff:aa:ec:db:8d:b4:d1:66:e4:e3:11:26:b5:
                    91:bf:76:be:c3:92:b4:94:65:1c:7a:34:f2:eb:b8:
                    f5:ed:0e:ce:87:7e:02:9b:c2:18:53:05:8f:07:9e:
                    62:b3:14:31:51:8a:af:c7:ad:70:7a:dd:65:c4:de:
                    9b:80:3b:3c:fd:93:43:88:e1:60:c3:6c:10:fd:66:
                    7a:ed:60:e4:de:dc:1d:9e:80:33:d5:28:f8:d9:ca:
                    21:0e:dd:34:28:b6:74:0a:bd:5b:11:d1:01:dd:8e:
                    c4:73:7f:7b:d5:96:a7:5a:cd:94:c5:5b:b8:22:77:
                    5b:47:b5:29:be:ea:b3:e5:5e:28:88:e0:20:04:ba:
                    1a:e0:07:1d:e1:10:5b:d5:cb:9f:af:fc:4c:1c:4e:
                    20:60:2a:37:44:e8:4d:b9:64:22:aa:d5:48:31:81:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:34:26:FF:CE:CD:E2:A8:78:64:D4:1F:1C:FD:3D:26:41:80:CA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/a94dd26b-2af7-3846-8733-909194b7fd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:8006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:7e:bb:b0:68:57:72:79:49:77:f4:59:f9:d7:1f:71:26:
         f6:57:81:f3:c8:02:bc:04:c9:c8:3a:ee:a7:cc:55:6c:a1:e9:
         8b:ed:0a:34:7c:45:a2:19:b4:85:00:ce:60:6d:d1:67:02:9d:
         5f:f1:3c:f1:ef:cd:4a:3a:3b:dd:47:9a:78:da:71:82:60:5f:
         d7:45:bb:7c:f4:9f:39:e3:a9:fa:47:2f:bb:d3:56:80:89:aa:
         3f:54:82:0b:72:91:c1:b1:18:ca:a3:d7:e6:e7:be:2e:ad:7f:
         9e:0c:fe:f1:88:a1:a7:2d:9f:bb:af:fe:48:1d:b5:da:a3:b2:
         19:56:97:4b:08:4e:bf:78:b6:76:e8:85:80:03:62:39:27:ca:
         2f:5e:80:7f:49:7a:46:1d:9f:f9:3a:9a:74:07:0f:78:85:5f:
         9f:54:d0:ad:94:68:09:de:9b:df:cf:a9:e4:de:39:74:42:5b:
         da:48:19:a3:c6:c2:45:b3:af:6b:e1:ba:ea:73:69:65:02:25:
         3c:f8:ef:fb:5c:75:12:b3:2e:b7:16:03:6f:27:cb:21:49:05:
         e9:4a:92:76:eb:c8:b0:46:fa:c0:a7:ae:42:8d:b2:7b:8e:97:
         c9:18:ad:8e:a1:34:cc:7f:1c:91:65:25:0a:57:71:9d:78:8f:
         48:59:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 20:57:19 2026 by rpki-client