Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/1bf29a1c-6427-354d-877b-1eff8ec29e47.roa
File:                     1bf29a1c-6427-354d-877b-1eff8ec29e47.roa (raw, json)
Hash identifier:          xZ07i779BMW7CTKHul4iD9pCCl7LCRJu+mmdSM5liaM=
Subject key identifier:   27:40:18:A5:1E:24:A0:A8:50:33:A7:95:9F:A6:C7:68:15:69:9A:78
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F4328584E5D14A8825F049888280CCEE0
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/1bf29a1c-6427-354d-877b-1eff8ec29e47.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     397606
IP address blocks:        2605:4940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a8:82:5f:04:98:88:28:0c:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=af54029f-82a1-49fb-b89a-a6c91909b541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:64:05:92:78:53:cf:79:6e:1b:39:20:e0:
                    5b:f3:ce:90:52:49:06:24:c1:78:a3:3d:22:78:2f:
                    a7:b4:62:ce:d0:d1:f3:d0:b2:4d:47:bf:b8:5e:7d:
                    09:57:65:eb:79:ee:df:4c:6b:c6:da:95:1b:3b:e9:
                    36:b9:74:87:95:b9:b1:c3:ea:27:6b:1b:95:68:3a:
                    5b:04:33:ae:7d:f1:4c:85:36:d7:0a:47:12:be:4e:
                    e6:16:8a:a1:28:6a:f9:5b:4d:4f:a7:c2:b4:ba:fc:
                    34:22:53:11:44:fb:eb:ca:ed:60:4a:1e:cf:89:c1:
                    f5:f0:d8:71:96:f2:31:ab:6d:1c:08:3a:33:c9:f6:
                    3a:2c:e4:7e:05:1d:9a:67:9b:d0:aa:2d:07:a1:23:
                    57:21:87:f3:dc:59:9f:e3:54:d7:24:82:8a:ce:ae:
                    c6:ce:89:18:24:d3:6f:1b:d8:43:6a:d6:85:9d:76:
                    7a:89:e5:00:84:db:3d:38:f2:7c:be:08:c3:d1:23:
                    73:8e:06:54:40:d2:79:6f:71:66:e9:42:2c:e3:15:
                    dd:ce:7c:92:bd:ef:ab:d5:35:6a:0e:1c:aa:93:f7:
                    5b:dd:e5:a9:19:9a:ca:e0:e0:24:9e:ca:9f:94:d6:
                    94:ac:89:90:70:9a:46:1e:6a:0a:20:a6:f4:d4:28:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:18:A5:1E:24:A0:A8:50:33:A7:95:9F:A6:C7:68:15:69:9A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/1bf29a1c-6427-354d-877b-1eff8ec29e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:00:bd:70:84:45:1e:ee:33:a6:19:99:1c:6f:4f:41:61:92:
         ae:f5:f0:8a:3e:58:21:87:8e:7b:76:bf:8a:27:b5:a2:3e:c1:
         6b:6a:78:85:d3:de:32:f4:26:51:02:90:3f:10:f2:fa:12:c1:
         bb:0b:15:db:9c:39:3c:34:93:db:66:af:7f:8f:0f:a2:7a:e3:
         ed:23:47:ea:d0:94:02:a6:5f:69:61:24:9f:6e:c6:b3:4e:28:
         ce:b6:b4:12:3c:fd:6a:0f:d9:e7:92:be:87:a1:df:0d:91:1e:
         4a:3f:81:c4:ea:cd:6a:6d:a2:80:6e:48:4a:67:52:54:80:e6:
         a1:9f:08:e0:08:c1:28:d2:ef:b6:1d:c7:b9:88:50:7d:94:6b:
         10:bb:e7:59:46:17:d6:f1:26:64:7b:52:b7:9b:3f:f4:22:73:
         b2:d0:9f:3d:4a:c2:9b:0d:1e:99:c2:8b:8b:98:4c:f4:6c:e3:
         53:75:4e:ee:7b:0f:7a:2f:54:9d:18:d4:cb:de:70:e8:f0:6b:
         e0:3a:15:99:46:22:cf:47:fb:1c:24:61:ec:3f:f9:66:20:8d:
         10:26:63:db:54:60:94:bb:8e:3f:e7:ad:e1:c1:96:a4:ef:00:
         27:83:07:ec:0d:5b:6b:19:73:96:1d:9b:c3:0f:1d:f6:99:37:
         ba:f0:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 22:14:18 2026 by rpki-client