Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
File:                     0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa (raw, json)
Hash identifier:          Plh9JFWD/uTEN+SAvk0Sdb/7gvvdSiJ2P6e1j0ETwZc=
Subject key identifier:   9A:4B:EF:04:C8:07:AD:88:B9:88:2B:01:1B:B1:8D:F2:2E:06:EF:5E
Certificate issuer:       /CN=ab971181-47ed-4815-8f1e-60d429db1463
Certificate serial:       010D0C9F4328584E7204D7B5A6B54888EAC3DC80
Authority key identifier: A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     7105
IP address blocks:        2620:2::/48 maxlen: 48
                          2620:15a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d7:b5:a6:b5:48:88:ea:c3:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab971181-47ed-4815-8f1e-60d429db1463
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=2ff1852b-215f-45b1-98ee-a2e5738bcb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:cd:5d:80:b5:76:f3:bc:76:b8:e8:2d:83:
                    74:73:40:21:59:67:9a:2e:d0:a5:1b:d3:5a:a5:3e:
                    03:4e:bd:71:79:51:45:eb:a1:6c:e7:e4:69:6d:f9:
                    c8:de:91:b5:cb:91:99:2d:7e:ad:e2:78:c0:35:29:
                    1e:04:ec:56:23:02:00:ab:2a:05:03:e3:92:e5:bd:
                    34:f0:14:fe:f6:89:b7:86:13:44:52:3c:ea:16:4b:
                    bd:32:13:80:c6:c8:2e:dd:8b:4a:70:b7:7d:4e:96:
                    0f:71:ce:29:d2:7e:13:ba:c2:69:25:60:50:09:b1:
                    61:94:90:4c:13:59:13:b0:41:47:22:eb:87:00:ea:
                    58:e5:26:d9:5e:f1:3d:3e:ef:28:3d:70:26:d9:b2:
                    47:12:14:9b:a3:74:ab:b9:4c:8e:6f:66:d2:07:84:
                    12:15:e1:6e:ec:79:e4:0d:8d:b3:35:47:2f:fb:35:
                    41:65:56:01:be:7f:81:3f:85:13:f4:74:94:9c:88:
                    cf:d1:5e:78:dd:50:47:d5:31:5c:79:67:90:d2:b9:
                    62:26:a8:6f:c2:c5:9c:21:68:2d:0a:e0:a1:e1:b5:
                    30:2b:32:d6:b9:82:e5:9e:0f:22:1c:a4:ef:3b:c6:
                    f6:08:3c:23:fb:95:1a:0e:97:b2:51:d2:ab:ae:3d:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4B:EF:04:C8:07:AD:88:B9:88:2B:01:1B:B1:8D:F2:2E:06:EF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl

            X509v3 Authority Key Identifier:
                keyid:A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2::/48
                  2620:15a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:61:a7:45:89:a1:ec:1d:80:5b:14:f9:53:6d:68:06:d4:05:
         2b:3a:4f:42:19:53:5f:bf:b5:b8:cd:cb:44:fa:c4:a9:cf:e0:
         a7:6c:57:61:a0:b6:1a:4d:f9:be:89:85:8b:17:14:1e:20:96:
         13:7b:18:90:09:a5:bf:08:55:56:91:cd:d4:01:ea:d5:38:c8:
         9a:b6:6e:f1:a0:0f:23:fe:28:3d:ab:4b:c1:e1:25:df:9d:31:
         af:d5:b5:5f:f4:a2:12:03:30:bf:c8:68:c4:16:c9:94:80:5a:
         ef:ae:1d:28:fb:c7:c4:a2:77:dc:71:c3:60:27:0a:f6:bc:9b:
         21:e0:6c:a7:6d:8f:d9:56:82:3d:14:09:c2:9f:c1:68:31:e4:
         07:cb:ad:8a:76:da:e8:a7:5b:00:54:c7:4d:df:51:c9:49:1d:
         97:58:9c:5e:62:40:34:86:5f:c3:20:0e:8f:89:a7:f1:f3:66:
         49:e4:e7:4a:e5:32:34:93:1c:ce:d8:f9:38:1b:7e:6e:55:f5:
         28:c6:1a:9a:9f:44:43:fc:2c:17:a0:13:f8:df:9b:49:bc:ee:
         a1:44:1a:de:60:1d:e0:a0:ce:13:35:8a:22:f3:f9:00:3f:fe:
         f6:ac:be:a9:db:be:cb:5d:59:8a:7b:14:e1:7a:b1:be:c9:5e:
         4f:d9:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 16:04:52 2026 by rpki-client