Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa
File:                     d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa (raw, json)
Hash identifier:          J3UkkC5yjs8jBWitBS+XTiIW3FXGo4BYykI6eu/3E3I=
Subject key identifier:   73:D5:DF:0B:5E:33:1A:2B:6F:FC:A4:A5:0D:FB:B5:BE:8B:39:7F:94
Certificate issuer:       /CN=3878fd50-eae1-4b38-a142-8eff8910579b
Certificate serial:       010D0C9F4328584EA7981A9C70092C79FB3CAA68
Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14807
IP address blocks:        2607:b7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:1a:9c:70:09:2c:79:fb:3c:aa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=22689249-f23f-4b82-ac1d-f190bd15c856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:0e:2c:57:40:c6:05:3b:7a:ff:1a:a9:ad:
                    e6:24:6c:3b:75:a4:ab:97:41:7c:a1:48:61:16:70:
                    a7:db:be:45:fa:21:1d:97:2e:b9:fe:cb:ce:3e:d0:
                    51:d7:31:db:ab:40:4d:01:66:3c:ca:cd:69:18:0b:
                    26:65:9a:7f:3c:6b:ed:f9:55:f1:41:5b:cd:d4:9d:
                    56:fd:c4:d1:43:46:4e:fb:8b:60:f6:86:3d:3c:0a:
                    09:d6:0a:84:5a:05:7d:02:1c:a5:e3:8b:b8:7c:58:
                    5e:bd:39:13:ad:e0:2c:a6:0c:75:18:75:e3:70:b1:
                    d5:2b:a2:b7:4c:9c:40:90:5b:b4:d4:72:83:1b:f5:
                    e4:3e:1c:cc:fe:4f:5e:d3:5c:87:e5:74:1e:3b:23:
                    f7:d6:ac:3d:da:c2:d7:de:c5:cb:aa:ca:92:a7:54:
                    69:33:7e:16:75:d4:91:48:8d:61:27:70:82:15:9f:
                    34:5a:e7:89:ad:58:40:b2:dc:43:c0:3b:43:ab:83:
                    e3:f2:d7:56:a7:3e:92:2b:aa:e2:93:fb:8a:d3:a4:
                    34:ce:01:dd:fd:7c:44:5c:45:a8:ed:87:a4:39:37:
                    8e:3c:2c:71:43:e3:0e:65:ad:79:5f:1c:c5:c0:78:
                    c7:8d:c4:fd:ef:d2:0d:a8:a3:eb:0c:f2:41:89:0f:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D5:DF:0B:5E:33:1A:2B:6F:FC:A4:A5:0D:FB:B5:BE:8B:39:7F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl

            X509v3 Authority Key Identifier:
                keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:f8:19:b0:83:e4:15:ce:75:33:05:f3:f3:0d:cf:0a:ad:
         22:79:50:7c:16:7d:0e:94:b3:c2:10:40:d5:57:ea:09:42:2a:
         cf:b3:80:e2:36:76:fc:e0:82:cb:63:5b:81:34:6c:2d:d0:2a:
         d8:d8:11:19:5c:e2:c3:5f:f3:db:c2:e0:62:74:17:08:36:5c:
         da:0e:3e:a4:00:9f:73:68:ed:1a:25:1d:f1:ae:cc:d0:2b:28:
         07:ab:b6:7a:18:8a:e5:6f:58:6b:7f:ce:1b:88:83:0d:17:b9:
         78:5b:b5:e5:29:0a:af:6b:4c:ad:47:56:8f:e4:56:16:eb:9f:
         b9:79:65:dc:cd:11:5c:fa:44:37:40:6d:b5:00:91:7d:cd:99:
         0f:38:cf:44:f4:9e:00:4b:4f:2e:7a:65:57:d3:40:d1:74:e6:
         a4:97:e6:ef:70:d3:26:02:55:a6:d4:b7:40:b4:e3:eb:00:d5:
         9c:6f:ae:5e:72:d2:83:dd:8c:89:5c:4a:bf:fd:43:ba:e5:03:
         02:2d:0b:4b:2f:de:ab:db:ee:82:f1:92:2e:6b:8a:75:18:38:
         7e:19:ca:63:e9:21:2e:4c:1d:2d:17:a6:2a:76:e1:50:69:84:
         bc:2e:0c:a4:c0:03:e2:8f:db:47:3e:8a:9b:f0:81:b1:7a:a7:
         32:58:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:36:29 2026 by rpki-client