Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/d379bba2-933c-391a-8ac2-74f2d31db2fa.roa
File:                     d379bba2-933c-391a-8ac2-74f2d31db2fa.roa (raw, json)
Hash identifier:          JxMKRVYYXbhA+ctj+juEPLXUQViW9cOal0qVEcJGymc=
Subject key identifier:   11:01:A5:19:DA:BA:A4:AD:0D:87:77:0F:53:AA:84:15:6D:A5:F6:8E
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584EA827709C239C8D4025C8D460
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/d379bba2-933c-391a-8ac2-74f2d31db2fa.roa
Signing time:             Wed 29 Jul 2026 06:23:47 +0000
ROA not before:           Wed 29 Jul 2026 06:23:47 +0000
ROA not after:            Tue 27 Oct 2026 06:23:47 +0000
asID:                     7018
IP address blocks:        2620:1f7:c053::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:27:70:9c:23:9c:8d:40:25:c8:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Jul 29 06:23:47 2026 GMT
            Not After : Oct 27 06:23:47 2026 GMT
        Subject: CN=8fe4f4a7-a028-47e5-93e5-aa6b504f25a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:0c:38:6e:b1:90:ec:96:8f:68:5b:10:5e:
                    79:05:1e:bc:5f:34:7a:9e:d4:56:38:02:91:63:14:
                    f6:e6:ec:47:d4:b6:09:57:a4:f1:b4:4b:ed:7e:f4:
                    d3:8a:6f:ba:4c:04:71:31:82:8f:16:80:1d:fc:1d:
                    95:53:0d:d6:43:c8:ec:28:54:c5:9e:3e:04:50:e7:
                    c3:2c:14:c3:d7:ca:7b:e9:c3:33:f0:69:0c:cb:be:
                    2d:52:74:00:52:1b:b9:d4:6e:5d:5d:81:49:33:7e:
                    bc:11:0a:3e:b6:d9:ca:38:b5:7c:bb:99:8a:35:3c:
                    68:3e:2a:1c:b4:c1:04:b2:d2:6f:7d:0d:a4:f6:36:
                    11:b4:c8:e0:3f:5b:a2:f5:d7:4c:fa:24:e0:83:62:
                    a6:ba:7d:9e:29:56:31:05:01:5a:89:40:74:b4:2e:
                    dc:56:5b:05:a1:e7:50:44:56:67:b6:05:eb:8c:38:
                    de:8b:8f:2d:b9:ca:ff:14:67:c1:c6:b8:90:f8:d1:
                    9e:0d:41:cb:e9:15:ac:48:1c:5a:b1:36:2f:a7:65:
                    ef:06:19:ed:88:60:2e:9e:74:dd:f3:c0:62:d5:8c:
                    33:9f:eb:71:e3:24:e0:28:b2:df:4a:61:71:08:dd:
                    1b:c2:ef:06:21:35:0a:0f:59:d8:1a:19:85:61:c4:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:A5:19:DA:BA:A4:AD:0D:87:77:0F:53:AA:84:15:6D:A5:F6:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/d379bba2-933c-391a-8ac2-74f2d31db2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c053::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:c1:8b:95:5a:eb:69:75:c9:f4:2c:63:34:78:dc:85:cf:
         f3:dd:75:cb:b4:8d:bd:bf:f7:a6:fd:5b:a4:65:b1:f4:fd:77:
         58:45:f8:2f:d9:e0:47:89:7a:07:ee:46:90:32:f2:86:c3:e8:
         0c:01:eb:be:97:16:ba:f0:d6:dc:73:32:32:64:ae:74:59:af:
         d9:4e:5a:ba:62:55:ab:76:99:40:80:cd:0d:44:25:ba:19:fc:
         98:6a:da:16:f7:5b:21:83:64:7e:45:b1:8c:5f:7d:b0:ad:88:
         af:4c:9f:7e:28:12:f8:10:9a:51:38:9b:f0:25:7f:2b:18:90:
         db:ea:82:60:6e:4c:9e:b0:f3:9d:84:ac:ca:1b:05:91:1f:63:
         a1:57:0d:1e:b6:35:72:f5:e4:ab:cf:27:59:60:0a:28:6f:e0:
         7b:c7:c2:9e:4d:97:a2:63:13:9c:67:04:62:7e:61:3d:79:25:
         f1:64:12:54:ea:0d:e5:92:b2:9f:fd:7d:50:69:c6:53:31:78:
         66:40:79:5c:fd:86:03:62:70:e9:78:62:54:13:5c:7c:a8:3a:
         a4:fe:dc:18:1f:72:c8:05:bc:ed:a0:1e:c7:ef:ef:45:1b:3e:
         09:7f:30:d4:f0:6c:20:2a:3a:68:e8:06:88:13:2d:cf:d5:11:
         f4:8e:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:50:30 2026 by rpki-client