Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa
File:                     7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa (raw, json)
Hash identifier:          8yzrqtaXN02W9weGtH2Ij+a0MyAm0n3Yjlc4mzx1TFE=
Subject key identifier:   E9:C2:C6:7F:B4:C8:A7:32:B2:34:4C:F8:13:31:5D:BB:F5:A3:05:DD
Certificate issuer:       /CN=7a870649-61cf-4a59-a195-226a35c00514
Certificate serial:       010D0C9F4328584E2AD466E8D7C03F484DA89F00
Authority key identifier: 89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     1224
IP address blocks:        2620:0:c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:66:e8:d7:c0:3f:48:4d:a8:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a870649-61cf-4a59-a195-226a35c00514
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=497bbd72-eeb2-430a-9319-17698760e180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:a3:53:b3:23:71:03:f8:d5:85:d4:ca:7f:
                    3c:6d:8d:ab:40:94:f9:e7:24:f4:16:06:9d:81:8a:
                    0a:8a:97:55:21:0c:dd:5b:68:d7:4b:68:c6:8d:95:
                    aa:de:04:87:a7:7e:0d:d9:18:65:c5:06:e1:fa:95:
                    2e:3b:0c:06:b1:5e:ca:b9:7c:a1:3a:9b:a8:22:c9:
                    11:bf:b1:b6:71:c1:f7:d9:19:bd:5d:b7:3e:18:6e:
                    8f:77:c2:db:02:5a:c8:6f:2f:b7:33:87:fa:ad:2f:
                    90:8c:3b:03:9d:b2:c3:c3:b6:ea:12:68:15:e8:17:
                    d0:71:f6:da:27:c1:9a:fe:d0:a4:8a:cc:f5:57:83:
                    15:db:08:c4:b3:e7:fb:02:65:6e:04:1e:bb:52:54:
                    0e:60:93:e0:92:5e:f8:be:8f:fe:78:59:87:b1:73:
                    fb:8c:00:e3:b8:5b:9d:54:a4:97:d0:9c:2a:25:b1:
                    6d:41:eb:5b:1e:10:90:fe:e6:15:0b:33:95:3a:39:
                    7c:6e:50:5f:fc:18:6d:33:10:e2:45:cb:b5:7e:a2:
                    e0:b1:8e:7d:bf:ff:e4:60:34:83:90:fa:dc:d7:f8:
                    a3:20:ad:47:75:e8:b3:21:0a:1f:a8:81:1f:5e:96:
                    c5:3b:94:28:32:4b:ad:9c:58:d8:8c:ff:d9:48:1f:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:C6:7F:B4:C8:A7:32:B2:34:4C:F8:13:31:5D:BB:F5:A3:05:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.crl

            X509v3 Authority Key Identifier:
                keyid:89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:c80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:c4:7f:16:c9:fd:b8:33:16:80:17:38:f8:4c:d4:50:37:
         64:af:f2:9b:e4:2e:ac:89:0c:ed:b9:7d:05:d7:72:d3:b5:79:
         f9:69:70:95:ff:fa:12:9a:d9:b8:1e:6e:f9:44:a7:c6:87:87:
         8f:37:19:a3:5c:cf:ed:21:50:71:99:a7:80:f5:91:77:ca:da:
         4f:5e:17:9a:70:ef:68:1c:8a:bb:2a:a0:69:4a:90:c0:51:96:
         c7:03:23:b3:bd:9c:19:c7:29:06:d9:a2:92:74:7a:3b:63:c6:
         2c:10:16:71:e3:42:8e:81:1c:1d:8c:70:b9:d7:60:5f:2b:1d:
         72:e9:d0:fd:fe:ec:44:4d:6d:79:d1:e2:3a:30:c7:11:e8:71:
         63:75:fd:54:1f:2f:2b:29:96:7b:63:cd:61:31:3a:9a:6c:33:
         86:d5:52:a9:ab:07:75:2c:66:13:9f:a1:0d:92:6f:a1:19:7c:
         5f:05:c1:34:c0:36:62:a8:a0:f0:03:e0:bb:84:26:4a:76:93:
         44:a1:c7:12:a0:3e:ab:16:b5:f1:b9:f9:c8:90:01:db:6b:90:
         a0:99:16:c9:b7:99:14:65:46:fd:74:f7:e5:c5:c2:03:d9:7e:
         d6:3d:8c:06:5f:6e:93:f3:7d:18:0b:5c:56:f2:c2:ca:0e:95:
         f2:0a:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:06:32 2026 by rpki-client