Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/8f6d55ce-567c-3e01-a906-e62a0ce641da.roa
File:                     8f6d55ce-567c-3e01-a906-e62a0ce641da.roa (raw, json)
Hash identifier:          RrO1cs164guyTdpEvpNGPvgUDbZT0qj18yEBEBfkn+k=
Subject key identifier:   1D:E4:6F:AA:DD:B0:73:F2:17:40:24:8B:11:BC:18:86:FA:E3:CA:52
Certificate issuer:       /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
Certificate serial:       010D0C9F4328584EA7877085F6725D59BEE454A8
Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/8f6d55ce-567c-3e01-a906-e62a0ce641da.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2601:1700:e100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:70:85:f6:72:5d:59:be:e4:54:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d1162b03-36b6-4658-9c59-f2d1eeda4246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3d:b2:94:a9:a3:b9:3b:a3:f8:47:94:e4:7b:
                    65:a0:f1:cf:3d:2c:e2:3b:9d:7e:e3:b6:f2:c1:d5:
                    d1:08:e3:5f:d7:38:28:ff:87:cc:ab:6e:54:00:e7:
                    97:bb:14:17:24:55:f0:7e:94:84:45:a0:38:f6:90:
                    10:78:7c:69:14:67:ab:9d:00:e5:09:05:c0:a8:2f:
                    a4:b7:a9:56:27:fc:fb:6d:2c:e9:27:7b:21:9a:f1:
                    e9:ef:2f:17:bd:fe:57:ab:0f:38:89:0d:2f:24:a1:
                    ec:0d:81:09:34:63:3b:ec:3e:35:32:ad:6b:ba:ba:
                    ed:be:8d:91:fa:ef:44:b2:55:45:b0:a3:04:f3:a5:
                    71:54:0d:9b:30:a4:e7:e1:26:56:58:e5:9c:83:3f:
                    11:19:ab:15:a4:bd:90:e7:72:ca:75:6a:71:dc:ef:
                    e6:4d:bb:ae:b5:4f:ae:7d:38:66:be:97:eb:46:4e:
                    dc:97:c5:b1:19:22:26:c2:59:2b:13:05:6e:b8:0d:
                    b3:93:90:c8:6a:e1:e4:b3:87:3a:d2:bc:0e:ba:28:
                    ee:09:84:2f:df:e4:d7:d9:10:bb:da:d4:4b:a5:8a:
                    79:9a:64:29:3b:25:b8:00:47:d6:7c:b6:28:c5:79:
                    65:27:b0:2a:25:36:f8:d9:98:dc:b1:99:cd:cf:cb:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E4:6F:AA:DD:B0:73:F2:17:40:24:8B:11:BC:18:86:FA:E3:CA:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/8f6d55ce-567c-3e01-a906-e62a0ce641da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl

            X509v3 Authority Key Identifier:
                keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1700:e100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:4d:a9:d1:da:7a:7e:68:64:f9:54:a6:f0:03:7c:b5:c1:
         0c:e5:9f:69:47:47:46:e3:99:eb:ee:e7:47:e4:b1:a5:f9:c4:
         dc:d3:c4:bd:1d:7b:9d:6e:f5:56:56:7d:e1:55:1a:c5:03:98:
         5e:5c:59:28:d4:fe:cb:a4:5d:e6:af:8a:a0:7f:ee:1a:a1:e9:
         bf:1f:4b:25:1d:25:ec:a7:2f:19:eb:e3:d7:3d:23:06:5a:28:
         fd:0c:22:a7:76:0e:82:05:c4:24:b1:3c:58:e0:9d:e4:c4:3b:
         38:5a:7f:98:9e:55:86:88:c0:a1:d9:68:e2:10:3d:6a:b7:df:
         55:de:84:ea:22:45:30:40:ec:77:44:b7:f2:cf:75:4f:59:50:
         15:bc:bb:57:40:99:b2:07:82:e3:44:b1:64:ff:ae:34:d5:3c:
         f8:64:cb:a4:49:76:ba:55:32:e2:bb:6a:2f:52:9d:41:66:e2:
         38:19:26:d3:3e:b8:43:d6:44:8a:d0:02:db:0e:45:43:4c:fa:
         ac:64:66:ff:13:fe:e2:09:46:e6:99:18:9c:6a:8f:5c:9c:43:
         c4:4b:ec:63:77:bc:ab:59:2b:33:71:38:4c:9d:d0:bb:9b:db:
         97:09:da:1b:10:63:1c:51:bb:25:1f:0c:b1:ac:96:f9:a0:31:
         7a:e1:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:10:55 2026 by rpki-client