Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6389abe5-78a0-3278-a631-5daf4d1b63e4.roa
File:                     6389abe5-78a0-3278-a631-5daf4d1b63e4.roa (raw, json)
Hash identifier:          xKHzDy1aZSbETjdoN8amkIXq4MgRQSpniy7DelLHqpg=
Subject key identifier:   E0:6F:22:24:73:3D:F2:D9:D0:11:68:81:81:37:52:23:1F:16:F2:C0
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584EA79020747F58F0DB24198200
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6389abe5-78a0-3278-a631-5daf4d1b63e4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19901
IP address blocks:        2607:6c40:6020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:20:74:7f:58:f0:db:24:19:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8c682ebf-1da1-482f-a99d-6c24a848f6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:f9:2d:17:7a:56:9a:68:91:c9:af:c9:79:
                    87:bf:d4:d2:7c:0d:d6:92:fc:ea:47:79:1b:c8:a8:
                    72:72:59:ea:ad:02:50:b0:ad:32:e4:57:5f:5b:a5:
                    08:71:53:0b:3a:ae:4c:c3:78:a7:0b:ba:f6:51:61:
                    59:30:14:37:7c:4b:b6:79:d3:cf:3a:84:03:89:e9:
                    20:9a:60:83:15:e2:c5:e7:e3:73:ce:04:04:a2:cf:
                    dd:90:b0:21:e0:1d:5e:18:7d:8b:96:64:0e:79:69:
                    9b:83:9c:ee:72:c3:b3:cc:fb:7c:f3:f4:9f:1d:99:
                    e7:df:7b:dd:da:b3:80:26:d9:b7:93:a4:4b:3c:1c:
                    57:32:ff:4c:b3:0c:79:45:38:73:cd:46:7c:80:06:
                    28:56:04:a1:de:c8:3d:5f:7c:de:38:b1:8a:88:44:
                    7f:b6:e7:a5:25:ca:3e:96:55:2b:35:5a:2f:ed:59:
                    d0:c9:ce:77:f9:bd:c7:47:04:18:4c:7f:92:e8:fb:
                    09:e7:b0:a4:b5:6f:f6:85:6c:d7:06:2a:db:3c:71:
                    3b:4e:75:18:f4:b3:0c:e1:28:13:88:dc:aa:53:48:
                    88:80:1f:2f:80:25:7c:7b:17:3a:a4:83:a1:a7:26:
                    fe:00:7f:a2:8d:46:07:96:eb:b5:12:08:08:cc:2f:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6F:22:24:73:3D:F2:D9:D0:11:68:81:81:37:52:23:1F:16:F2:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6389abe5-78a0-3278-a631-5daf4d1b63e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6c40:6020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:42:ca:6a:d9:34:8d:7c:c2:4d:6d:38:9e:d7:e7:bc:6d:e3:
         d9:67:91:ba:71:42:af:8c:f5:2e:17:d1:57:0e:7f:34:cf:e2:
         df:d7:45:eb:fc:4c:38:5f:32:b4:97:bc:01:7a:e0:ba:fa:2d:
         c7:5f:8d:6d:29:1c:03:d9:82:c3:ce:f1:a6:75:c7:e0:d2:8d:
         d8:fb:34:cb:20:a6:3c:90:0a:4d:f9:c1:95:35:c0:ec:6a:35:
         0c:cf:c7:16:35:b2:32:c0:6a:1f:ae:1d:b6:a8:6e:0e:fc:c5:
         ce:aa:53:17:39:58:dc:31:4f:4f:04:71:13:af:64:a1:c6:f1:
         d7:b5:cb:26:6b:72:82:4e:ef:d5:ff:86:de:f0:b4:c5:ca:e1:
         69:ae:d8:61:fc:02:f4:31:aa:1d:60:b8:03:25:ad:b2:b1:f9:
         4b:2f:af:99:41:2a:f9:4f:d5:56:86:f4:e9:42:22:cd:a9:3a:
         f4:ab:d0:48:47:62:f7:59:2d:f7:74:03:f1:f7:69:0b:02:f0:
         28:88:87:94:85:77:0b:e2:97:5c:c7:7b:02:24:3b:0e:95:8b:
         c0:a7:24:fe:c4:bd:ae:a4:f1:34:87:50:da:7a:e3:5d:e7:a3:
         c1:d9:ae:3e:bf:7d:30:77:a5:67:81:f6:bc:e6:18:4e:02:e8:
         70:f2:5f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:38 2026 by rpki-client