Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa
File:                     449c300d-278a-3c44-94f2-b26447054b85.roa (raw, json)
Hash identifier:          et1AGgrKCTDE/I0/InVlSOzJUtoIF9hmxT6wwYxWmto=
Subject key identifier:   3A:7B:14:CE:82:AB:B3:E9:C5:2E:98:49:1B:7F:1C:CC:3A:E9:5B:6E
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F4328584EE38C9BFF68E8C631E4C0E980
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     22697
IP address blocks:        2620:135:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9b:ff:68:e8:c6:31:e4:c0:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=f53eb7ad-09c1-423d-90be-3c0d96cba7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:54:b0:ac:1c:b3:2c:5f:27:90:c2:56:e6:
                    e7:ac:2e:9d:b0:8b:0d:c3:9f:1a:d5:ab:ed:79:f9:
                    7a:8a:33:74:df:9c:80:b2:b6:a6:a1:a2:7d:a2:a2:
                    3c:52:d0:b9:35:ed:bb:43:d8:2f:3d:37:a6:0c:bc:
                    1f:f0:42:01:b6:59:06:ca:7e:d8:d9:66:6a:1c:91:
                    f2:a7:78:e5:d8:c2:99:75:42:99:13:62:e1:56:c4:
                    8f:c6:9c:35:58:56:3c:0f:de:5c:fd:ac:d4:47:b1:
                    f0:56:87:c8:6c:c0:2c:48:17:13:9f:e9:58:03:ca:
                    d5:38:93:41:b2:da:0f:ab:cc:54:20:80:f6:c0:e4:
                    57:41:87:23:13:fe:1d:c7:2a:ae:2d:bb:a2:63:66:
                    5a:45:67:12:ed:b7:cd:5a:d1:0b:2b:31:50:f7:66:
                    37:17:27:94:5d:56:07:b7:fd:f1:d5:77:03:57:d1:
                    44:34:86:83:2a:c1:03:ff:ad:e9:10:37:1c:40:73:
                    eb:c6:ac:50:3f:0e:cc:9a:33:dc:43:9d:9d:3b:8b:
                    6a:19:f3:3f:41:2a:94:2b:a6:6a:0c:f0:c6:86:9c:
                    f3:a3:1e:fc:17:57:07:19:f8:96:fb:18:fc:be:da:
                    2a:d9:c5:d1:cc:7c:bf:17:53:20:d8:72:93:04:78:
                    81:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:14:CE:82:AB:B3:E9:C5:2E:98:49:1B:7F:1C:CC:3A:E9:5B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c2:4e:a9:1b:64:1e:9f:1c:50:03:97:6f:db:4d:19:83:e5:
         ba:2b:a0:a8:26:da:d0:e0:10:b1:cc:61:b8:c4:27:fa:87:89:
         52:ab:e1:d4:32:15:1a:9c:93:c6:ae:a7:ac:6e:30:49:b5:11:
         41:79:9f:ad:78:e8:4f:15:98:c9:f1:47:77:ce:ee:c6:cb:e2:
         99:7a:01:30:b1:b7:c5:01:21:7f:57:bd:4b:70:20:47:e8:cc:
         a5:42:7a:37:0f:81:c1:a7:92:be:ae:5b:8f:d1:63:db:0a:94:
         95:ec:26:be:f0:98:15:cf:b8:74:ee:b2:1f:3e:3c:30:3c:48:
         4f:c6:1e:47:72:10:5a:58:e1:07:90:6c:1f:83:2f:9c:0b:f1:
         aa:68:11:f5:2b:0e:10:51:ba:b6:4c:b1:cc:7d:8a:f4:4b:75:
         8f:6c:52:30:8c:1d:41:f3:87:df:ca:64:fd:0c:76:d3:1f:a3:
         71:a8:bc:c6:5d:b8:92:17:ca:0d:86:7b:17:20:5e:52:8d:2e:
         87:77:0e:02:be:dc:30:69:54:12:a7:06:27:79:6d:0d:0f:56:
         60:d2:41:48:77:91:e9:2e:b7:59:27:b8:5a:e3:8c:b3:67:9e:
         24:cf:7f:39:9f:78:93:8a:78:48:c3:6e:f1:6e:2d:80:35:2c:
         51:aa:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:20:07 2026 by rpki-client