Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa
File:                     2e7fedc6-4231-3453-9c5a-bd24e5304959.roa (raw, json)
Hash identifier:          YqioWsQlBDwl39OQyMNqwzumg3t90XTv+mvHZeKyEig=
Subject key identifier:   13:51:A3:F6:6E:88:C6:23:6D:B4:2C:E0:6D:BC:03:C9:E0:EC:6D:01
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584F8F3DBB4A0F07DA666BA6DFC0
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     64269
IP address blocks:        2604:28c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:bb:4a:0f:07:da:66:6b:a6:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=0d6cd092-5cee-4bc8-9197-f12e87500997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:df:64:0f:22:a4:31:e8:4c:eb:fc:a3:43:
                    fb:9a:47:1b:06:44:80:3e:22:39:c5:cb:53:bf:ea:
                    84:f8:9a:dc:ad:be:12:83:66:da:a6:88:1a:ed:64:
                    95:ca:27:7e:f0:02:d1:84:ae:2e:a1:1e:79:17:5b:
                    fd:37:20:6b:23:68:48:fe:52:56:60:6d:96:e3:c8:
                    36:11:d8:6c:cf:3f:cb:8f:8a:88:20:27:55:5b:41:
                    bb:04:5e:b0:f3:30:df:d6:63:41:6f:77:d8:b9:c3:
                    74:de:15:28:5a:e8:97:a8:a1:f5:f2:f4:dd:03:a6:
                    70:eb:c2:ef:01:6b:c8:1a:e4:88:3c:ad:4f:1b:94:
                    08:37:72:6b:e6:24:d8:49:a7:4e:79:a6:5a:8a:a2:
                    6e:fa:82:67:27:25:8d:04:5b:23:1d:ac:d0:7b:9a:
                    ee:6b:a5:9b:bb:51:ce:e9:63:6c:59:60:0a:1d:be:
                    58:4a:df:0a:f4:e0:30:69:eb:0f:4a:f1:73:d0:22:
                    2d:4e:13:b2:62:0e:c0:17:69:5a:0d:bf:13:38:d2:
                    da:b9:b6:91:43:63:4c:0e:9b:2a:b3:d4:ae:1c:d3:
                    c4:12:14:d5:04:ae:5f:6e:6e:19:ea:06:60:11:bb:
                    21:8d:b6:59:7d:88:b7:2d:11:de:7e:f9:52:96:b2:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:A3:F6:6E:88:C6:23:6D:B4:2C:E0:6D:BC:03:C9:E0:EC:6D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:28c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:43:fb:2f:6a:37:d5:34:ca:03:79:47:24:08:d3:78:fd:
         3f:c6:a3:94:02:40:a6:b0:e4:80:e1:fb:70:5d:ec:b4:4f:84:
         b4:ee:af:a7:4d:01:e7:f2:bf:12:15:62:22:55:fc:68:37:8d:
         8d:2e:d2:d6:1a:ca:f6:0b:43:37:1c:74:18:d5:66:b8:8a:cb:
         8b:29:ea:2d:d8:88:33:4b:2b:4f:04:f8:4a:ce:a7:36:f5:87:
         77:1b:5f:0b:ff:db:4d:58:f5:32:9c:f1:1a:9f:ec:e4:19:e3:
         fb:6f:c7:f8:4a:1d:95:e3:3f:f1:48:83:67:6a:7c:3e:e6:2c:
         28:cb:1d:36:9e:6d:e1:96:d6:9a:ac:34:23:55:49:c1:b6:b9:
         a9:10:ec:5b:9c:9c:fc:79:f3:4a:be:74:2b:90:d9:5b:a9:ec:
         a9:9c:e9:84:f0:11:68:58:0c:a8:92:a6:51:d9:0f:30:3b:f1:
         d2:0e:54:49:f1:f0:b7:5d:68:e9:b7:61:51:fe:cb:78:ba:c2:
         68:7c:7b:a0:93:c1:47:e3:4f:35:d0:15:e2:fd:cc:fa:da:50:
         e1:ad:c1:4c:6a:7a:de:5f:21:43:bb:c8:fd:b5:24:ea:79:c5:
         2c:5c:9d:cd:34:83:89:7c:77:d0:47:01:cc:04:32:9f:1b:d1:
         3c:82:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:26:23 2026 by rpki-client