Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/70bbe8a9-25f1-3a5c-a306-9ca714b192bd.roa
File:                     70bbe8a9-25f1-3a5c-a306-9ca714b192bd.roa (raw, json)
Hash identifier:          B87tGNqqdFO/xsZ4ssIvTx4hhXAHHbGqBwVDXlrpb/U=
Subject key identifier:   76:A2:00:2D:D3:21:F0:24:A6:90:45:12:82:67:AB:DD:32:1F:10:99
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584E82C4DF9233F26F296E1788E0
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/70bbe8a9-25f1-3a5c-a306-9ca714b192bd.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     36511
IP address blocks:        2606:2480:2480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:df:92:33:f2:6f:29:6e:17:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=090a096e-2fc7-43d0-8c23-c1fcbaf61f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ed:46:83:dd:54:0d:6f:a1:1d:64:c6:ff:b1:
                    8e:4b:6c:56:64:35:2f:89:cd:d3:ff:f5:ea:71:8d:
                    ed:9d:b1:ae:43:75:9c:0d:fb:9b:fb:0a:ff:60:b4:
                    53:c8:71:5e:71:7c:5a:38:32:0c:44:eb:7f:73:3f:
                    d5:5f:ec:f5:bd:7c:08:b1:8b:03:5f:d1:ed:42:35:
                    8d:ea:a3:91:86:03:7b:af:b9:3c:41:59:71:bc:40:
                    a9:66:6c:72:78:5d:88:44:87:a1:31:7c:87:5b:b8:
                    08:58:18:0b:5e:6a:58:0d:1f:f4:f1:1d:70:be:e1:
                    1b:c1:cb:2c:df:f8:3d:30:e1:20:2e:48:82:96:71:
                    2c:09:9e:b6:89:15:98:c2:de:3a:6b:9d:d5:83:75:
                    5a:ef:4d:06:34:97:9a:11:ae:fa:4d:c1:46:74:ec:
                    db:c2:f9:55:d8:0b:45:54:77:aa:0b:40:dd:e7:cb:
                    13:2e:21:bd:42:6a:4f:93:05:2e:ea:7a:96:82:37:
                    d9:0c:02:a9:40:f7:1a:c8:6e:9a:f2:6e:19:83:7d:
                    67:da:dc:df:cc:f6:d9:c8:cc:97:8a:03:72:47:22:
                    e7:36:89:b9:00:73:54:67:df:1a:38:9c:36:cd:72:
                    da:f1:b9:b3:7c:8c:58:90:52:7d:ca:3c:4f:15:60:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A2:00:2D:D3:21:F0:24:A6:90:45:12:82:67:AB:DD:32:1F:10:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/70bbe8a9-25f1-3a5c-a306-9ca714b192bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2480:2480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:82:97:3e:66:f8:e6:73:a7:cc:06:5b:68:a3:26:95:1b:
         40:29:55:7d:5a:62:df:02:43:05:42:06:68:2c:76:2b:b4:51:
         85:df:29:58:b3:3c:73:42:30:a4:38:dd:30:0e:b4:26:a0:d4:
         45:67:7d:29:59:43:0d:fe:12:1b:d3:c1:b5:fb:86:6c:f0:6b:
         6f:7f:ec:fb:bb:ce:4e:a1:e3:be:de:e2:c7:dd:cc:2b:a5:65:
         64:de:08:1b:f8:94:57:f1:b6:56:46:42:8e:ce:4e:8f:60:62:
         89:c2:30:b3:59:cf:c7:58:ef:06:ab:3f:19:c7:b7:6e:6c:97:
         4f:b8:ae:49:4d:fd:30:6a:12:2a:44:25:94:55:69:4d:c8:f7:
         0c:26:7b:74:69:c0:19:41:c1:58:94:63:49:bd:ec:5d:21:d8:
         f5:73:5c:27:94:7a:f7:be:81:e6:74:6a:6f:b2:4f:4b:a0:05:
         f8:7e:37:23:2a:0d:3f:45:2e:98:7f:42:ff:a8:e4:00:75:b8:
         10:a0:78:95:a7:1e:4b:a3:06:98:71:d2:76:4b:10:bb:c4:13:
         aa:4d:8d:b6:20:8f:e6:1f:af:e4:6e:a4:9c:d5:d1:75:02:53:
         a9:f7:b8:64:96:b1:d4:06:55:b9:44:54:ad:55:d5:96:7e:6a:
         4f:00:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:05:22 2026 by rpki-client