Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa
File:                     afcf11f7-4d27-3593-9511-7b35e311c3cf.roa (raw, json)
Hash identifier:          g+O4ZcXipEUJ7EDlrxooQyUO1AKp8MzTtGbgjCHhC5E=
Subject key identifier:   50:C9:D9:CF:04:45:F7:67:AA:94:95:BA:2E:F8:E4:23:08:BC:59:11
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584E78FF80B4E2875BDAF07E2B60
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     36511
IP address blocks:        2606:2480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:80:b4:e2:87:5b:da:f0:7e:2b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=fa6a7026-c541-4929-ad89-8143531e43d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:d5:59:69:b5:4c:2c:24:a2:05:17:65:41:
                    f3:bf:16:4f:5a:f6:73:dd:cf:a9:35:b6:44:6b:d1:
                    12:51:06:67:bb:e2:1b:0d:67:a7:01:a9:0f:d1:72:
                    00:7d:a0:a9:fd:1c:eb:65:86:c8:7a:4f:c8:f3:1a:
                    ee:55:f5:7b:20:e0:f2:38:c5:b6:23:1a:78:63:5e:
                    f5:2c:8a:48:9c:b0:16:6c:4e:ed:df:c3:8a:a6:f0:
                    e2:44:b4:02:a0:bd:e9:3b:8e:94:09:86:ff:45:01:
                    a4:5a:66:30:41:11:32:0c:2e:0f:00:18:d1:a5:52:
                    94:a0:f5:66:25:c0:0f:a0:30:60:7a:6a:91:ce:b8:
                    1c:a2:b3:95:1b:f3:7b:89:c2:b1:fe:31:89:07:58:
                    48:f2:ee:95:aa:e6:ab:b9:31:98:fc:74:59:d6:6a:
                    ca:7b:df:4a:1d:37:db:39:88:f7:65:20:0b:6f:fb:
                    55:14:e1:c1:5a:8b:0f:d7:05:7b:d8:14:c8:ab:42:
                    c9:68:53:86:4f:55:ab:50:66:e0:29:c0:ea:4f:39:
                    33:b9:a4:d3:c3:6b:9a:66:20:79:a9:93:e5:59:f2:
                    43:8a:33:5a:e3:cb:16:09:1a:dc:46:9f:61:ce:ae:
                    3e:ae:06:8e:06:33:d3:71:7c:cc:f4:82:10:ea:7c:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C9:D9:CF:04:45:F7:67:AA:94:95:BA:2E:F8:E4:23:08:BC:59:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:0d:36:ab:5a:bc:1e:15:84:f2:be:c0:78:bc:56:f2:29:
         ca:c0:3d:19:33:a9:f3:ed:88:a5:39:63:ea:eb:c8:94:9a:b2:
         b6:c4:49:da:a8:f2:02:c9:76:34:74:19:28:55:44:30:23:1c:
         b5:4f:4e:d9:7e:aa:4c:29:78:8a:22:e9:41:4e:39:3c:76:4f:
         1a:62:16:5c:24:db:bb:9b:b9:93:f3:3f:21:55:b7:24:79:38:
         3f:41:63:b3:e5:67:0e:db:5c:c6:2c:5f:80:3c:ba:70:d0:76:
         28:69:61:05:60:29:3e:29:94:b7:12:6c:26:3e:dc:e9:b1:c5:
         47:5a:ff:75:1c:88:0c:39:98:1c:ae:db:43:a5:50:be:f6:aa:
         2a:30:df:ef:1f:74:3f:b3:e6:0c:99:fb:8d:4b:3c:ed:cc:6f:
         3d:6f:82:36:ba:62:25:9d:3c:48:ce:d4:54:20:ea:1a:b3:33:
         02:03:4f:c4:dd:ce:da:d2:72:77:af:46:24:5e:ea:b1:ab:3f:
         a8:33:44:2e:e1:49:6e:a5:41:26:8b:b1:c8:2a:e5:f2:55:8d:
         dd:1f:85:eb:1f:99:b5:0b:7c:82:a4:e3:b1:4e:a7:26:34:43:
         de:47:4b:cd:b2:40:46:ae:73:d8:96:34:bc:3b:26:01:fb:b1:
         7b:8b:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:06:11 2026 by rpki-client