Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/59d76256-1f70-34fb-ac97-d0c98ed32303.roa
File:                     59d76256-1f70-34fb-ac97-d0c98ed32303.roa (raw, json)
Hash identifier:          X+8FivTI+pX/+wDBTXjZD95zFo9n7M3S2iK0FZzZX7M=
Subject key identifier:   27:06:9E:2D:9D:54:36:D1:45:C2:F8:2F:AF:8D:73:43:79:B1:3E:83
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F4328584EA7915EF9297FB330D3723A00
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/59d76256-1f70-34fb-ac97-d0c98ed32303.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26677
IP address blocks:        2606:b340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:5e:f9:29:7f:b3:30:d3:72:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0cf3a0ea-b3e4-4664-b4db-97adc7404dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4a:91:d0:24:c9:a7:43:f1:06:4b:21:00:a5:
                    11:69:16:a3:c4:05:14:45:28:a6:12:a2:2d:5c:6f:
                    15:79:1f:b0:b1:07:95:a8:05:ba:98:5e:24:e3:69:
                    7d:06:d8:b2:f2:a8:09:49:5c:e8:31:fe:5c:52:97:
                    df:1f:61:52:5e:c9:2e:3e:1f:db:01:52:3b:a1:7a:
                    a3:7d:29:fb:2c:df:36:18:d7:83:ac:57:d8:7c:cc:
                    85:3a:ba:ef:46:9c:31:bb:94:8a:6f:c2:88:f2:5f:
                    55:87:23:c1:ac:a5:c1:83:a2:4b:37:69:46:b9:9d:
                    d2:c4:0f:6f:de:19:0a:1a:54:7b:11:fc:01:b8:b9:
                    28:a6:93:0e:91:00:c3:90:f5:1e:8c:f4:d8:ee:87:
                    24:c5:9c:dc:09:8f:b9:c5:38:68:13:19:e4:1b:49:
                    00:31:8f:88:2c:92:92:7e:4e:4a:0b:b4:c8:cb:c5:
                    e9:10:56:52:32:cc:35:0d:8d:2a:53:a4:21:97:45:
                    1d:55:00:58:57:7d:c7:a1:c4:b8:09:1e:c8:c0:e2:
                    a1:61:15:e8:82:fb:7b:1a:64:4d:61:35:db:ad:9e:
                    70:a5:17:0d:59:55:ee:f1:fd:45:ae:ed:1f:36:c2:
                    25:2c:6f:3a:d7:de:38:83:4e:22:94:05:b0:da:49:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:9E:2D:9D:54:36:D1:45:C2:F8:2F:AF:8D:73:43:79:B1:3E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/59d76256-1f70-34fb-ac97-d0c98ed32303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:0d:c5:89:00:fe:cd:eb:ee:df:c4:59:91:bc:b9:88:14:
         e3:c0:7e:c1:27:98:ce:fb:43:dc:fe:c8:95:60:39:e1:62:74:
         63:b1:ae:f9:7c:ff:08:04:4b:1d:12:59:40:d3:18:55:58:54:
         f1:94:04:87:4e:53:84:cc:31:66:13:64:ea:4c:0e:23:e6:b8:
         22:2d:9f:5f:7a:5b:9c:fc:5c:6f:ab:63:8c:12:d0:78:0d:32:
         f0:ff:67:4a:99:cd:2b:51:93:46:ca:8a:86:38:86:53:a6:92:
         12:28:86:12:74:84:88:fd:b9:23:1e:f3:9c:6f:a0:0b:6f:c7:
         12:c2:31:82:bf:94:93:6d:b1:1c:42:96:91:21:2c:e1:97:a4:
         63:f1:dc:a9:54:db:ac:09:23:2b:18:74:89:35:47:65:b1:d8:
         79:c1:f3:3c:3f:2f:f1:55:c2:d5:e3:44:ac:14:e1:d1:e3:3a:
         8f:b1:ff:02:1e:21:57:f7:08:25:c8:c3:32:05:f0:25:5b:a7:
         a1:51:96:2e:62:e8:3f:7c:b1:be:b4:8a:30:d0:5a:50:6d:f6:
         a8:12:50:2b:a4:81:2b:dc:7e:06:2d:8e:e5:c2:44:ce:9a:aa:
         4d:db:fc:c6:f1:ac:30:c1:04:eb:a8:9a:6b:64:14:6c:34:4c:
         5f:9d:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:46:07 2026 by rpki-client