Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa
File:                     af9a9b5b-da9e-3336-9702-74ff3b725355.roa (raw, json)
Hash identifier:          /8Qs9fp96XOH432TIqEZf3gi6WTjscFAZeU+HCLw4q4=
Subject key identifier:   FC:AE:79:FE:66:D9:FB:03:CA:29:A8:5F:FD:9B:EE:77:0D:8D:CF:A0
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584E640F703E410C284E772B5A00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     7065
IP address blocks:        2607:43c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:70:3e:41:0c:28:4e:77:2b:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=4d378d61-53f0-4f12-a04c-d31429569bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:df:66:a5:20:2a:6c:97:49:3c:82:47:2d:
                    5f:eb:19:03:00:a3:23:70:5a:7e:cc:9f:5c:ac:c2:
                    7f:34:91:47:c7:ec:0f:aa:4e:9b:ad:03:de:6a:d1:
                    f2:7f:4d:2a:b6:10:a5:f0:43:5a:8c:c6:be:d8:3a:
                    c5:c8:81:81:ab:05:6a:f6:f9:95:a4:d5:e4:4e:f5:
                    39:6f:89:b8:f6:04:b5:87:13:6b:a5:dd:63:14:a9:
                    9c:b0:af:61:2a:12:18:2b:94:32:d4:2a:8c:ba:a5:
                    2a:e0:95:f0:88:88:ff:66:58:7d:cf:9c:6b:61:b9:
                    59:8a:72:c3:2b:50:a2:92:b6:67:4f:15:53:13:10:
                    8c:9a:1e:9a:53:2b:37:3a:dc:1c:18:ab:96:4d:f0:
                    07:12:e4:3c:4c:72:a7:5f:1f:15:5d:6b:58:bd:e6:
                    da:50:4f:bd:f0:50:d1:54:78:5f:9f:17:d5:5f:05:
                    b9:6a:e8:ad:d2:d8:92:c0:54:4b:0a:21:45:e5:b8:
                    63:94:b4:74:d5:6a:3a:97:f4:2a:10:1e:55:77:23:
                    39:7a:bf:1e:41:16:41:b7:12:89:a8:8b:4c:dc:09:
                    84:44:83:56:95:bf:77:e8:40:67:f7:f8:49:10:c1:
                    be:50:f8:50:cb:a5:3b:09:ad:63:3e:17:c4:d6:d4:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AE:79:FE:66:D9:FB:03:CA:29:A8:5F:FD:9B:EE:77:0D:8D:CF:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:43c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4a:aa:70:24:db:b6:8b:22:98:11:7a:7a:6f:8d:03:65:b8:
         75:18:8a:5a:6d:c1:f4:eb:aa:53:21:68:6d:66:8e:5a:41:da:
         64:05:2e:51:87:a2:df:95:25:cc:a7:69:3e:aa:be:16:33:3b:
         92:66:4d:22:13:e2:87:ed:61:ae:5b:e1:10:c2:8f:bc:48:60:
         ad:b4:d2:10:4c:48:f8:a2:41:84:66:4a:bc:b6:cb:7d:53:b2:
         ff:bb:b1:28:3a:c8:1a:a0:92:c0:07:6c:cd:01:e6:d1:b1:24:
         65:cb:81:2c:46:d4:49:e9:4e:21:26:e1:5d:4b:dd:8e:96:2f:
         77:16:7d:09:40:41:04:ee:46:5a:fc:7a:f9:df:fc:36:a3:7d:
         62:83:65:bf:1d:8f:14:0a:89:4b:4b:27:75:19:b3:d0:13:c9:
         da:98:94:e0:47:57:70:18:97:db:7d:60:c7:6e:67:5c:68:ff:
         79:65:86:0c:3f:24:06:98:74:07:83:a9:12:5d:5b:d1:d3:06:
         07:02:ea:50:79:8d:ac:a4:47:3c:ad:5f:db:1e:f2:93:88:83:
         98:ae:28:3e:eb:b3:fe:95:65:63:52:ba:eb:9f:b8:fb:4a:6d:
         8e:90:bd:e6:c9:7f:c6:c5:8b:36:ae:8e:83:34:de:90:62:0e:
         d0:c7:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:47:35 2026 by rpki-client