Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/48c251c3-5951-38f3-a902-58b0526791ca.roa
File:                     48c251c3-5951-38f3-a902-58b0526791ca.roa (raw, json)
Hash identifier:          PMjr1CjYUxsrIBCM4RBbZSn0Fr2XJPR7dBCJwwHOOhw=
Subject key identifier:   88:0B:1D:8F:96:4D:73:07:0F:55:EE:BD:EB:BE:DC:41:52:CD:A9:28
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584E4129CA361943EBE31F060300
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/48c251c3-5951-38f3-a902-58b0526791ca.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     6315
IP address blocks:        2607:fa18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:ca:36:19:43:eb:e3:1f:06:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=6e3a98f2-4e3e-446a-ba94-f35875302052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:1e:20:a0:6c:2a:c5:62:f3:91:0c:a0:eb:
                    5e:82:e3:5c:d8:50:ba:75:25:5e:ca:0f:c5:cc:6c:
                    d6:b7:75:60:91:84:60:78:29:18:b1:76:35:db:19:
                    5b:a2:11:f9:9d:63:b8:73:f1:86:c9:b5:ad:d9:eb:
                    99:f5:40:08:27:f5:0f:21:4f:86:e6:9d:37:cf:b8:
                    d7:bc:0c:56:62:75:a0:2f:48:1b:72:e8:57:98:a9:
                    6e:ee:53:dc:48:2d:c0:86:71:3f:a9:24:24:48:fd:
                    b2:35:93:5a:97:23:21:e8:07:4a:85:73:2f:a0:f8:
                    26:3a:50:5f:24:99:23:bb:30:cb:f8:c3:a6:e5:b6:
                    63:71:0e:aa:51:de:65:96:23:02:1a:06:49:85:8a:
                    68:20:69:31:25:fb:f4:0c:47:7c:d7:00:3b:1d:fc:
                    98:7c:3e:6d:f7:8c:30:87:3a:6b:28:a5:1c:e6:5d:
                    bc:e2:cd:fa:0e:03:d7:84:3a:28:ec:f9:7a:d7:0c:
                    04:0e:e4:1b:61:52:b0:69:f7:a1:0e:00:90:4e:31:
                    bf:56:14:a7:50:60:11:85:5a:31:0c:33:91:5a:65:
                    06:ad:6b:c9:66:2b:74:85:ca:1a:4b:56:23:6b:28:
                    df:be:ec:85:fd:2c:46:e0:61:da:50:37:78:f4:ee:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0B:1D:8F:96:4D:73:07:0F:55:EE:BD:EB:BE:DC:41:52:CD:A9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/48c251c3-5951-38f3-a902-58b0526791ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa18::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:26:b2:12:44:c8:89:99:69:37:ed:e7:cd:44:06:45:5d:ea:
         b1:94:b5:f0:39:90:65:24:c1:3b:94:23:86:94:be:3c:58:df:
         19:a9:b8:e2:9c:8f:e4:82:70:1c:f0:1e:8f:59:94:63:de:20:
         7f:4e:82:0e:43:5d:43:23:7d:b9:73:8e:06:df:19:8b:82:0e:
         4c:3d:0d:b8:e8:48:47:5e:de:86:71:c2:3b:92:fb:4c:f0:76:
         9d:6c:5b:22:7c:c6:6a:ce:80:98:f2:c2:91:00:fc:b3:ae:93:
         8f:25:39:e6:6d:19:86:84:9e:05:d0:a7:c8:e3:6b:e0:fd:3a:
         91:ba:78:a4:cb:21:28:a0:20:f2:eb:ff:e5:b4:eb:12:d6:19:
         9e:9b:96:da:ba:1f:f7:e0:a3:a4:12:8e:d6:2f:73:ea:27:21:
         db:06:6b:a4:27:8b:e1:2f:39:ac:21:a1:aa:c5:69:dd:2d:e8:
         7e:c2:8f:fb:2a:6b:cc:71:91:28:51:56:1a:9a:bb:6e:ab:af:
         e1:ae:e2:8c:80:c8:8e:ca:ea:b2:fc:8c:f0:1a:e2:16:3d:57:
         dc:4f:d4:1b:89:40:91:d2:59:bd:2a:81:2e:7a:15:43:f1:e0:
         fd:9a:61:78:1d:26:d2:04:4f:2d:fd:45:6f:82:45:c0:21:e1:
         35:07:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 22:24:05 2026 by rpki-client