Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
File:                     a546cbb8-2a70-392d-873e-3968c05e710f.roa (raw, json)
Hash identifier:          o01Xa0hxZ/wEzyZ0L1PT7NhNkThYij2WZEpO0c/TWrc=
Subject key identifier:   41:66:8A:69:F8:AD:66:D1:F6:7E:AC:F1:B2:B6:8B:70:5F:0D:EE:C7
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F4328584EA8EC475A994044D8E503A800
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     393397
IP address blocks:        2607:8c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:47:5a:99:40:44:d8:e5:03:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=c01a1777-f5f3-46cc-bfb1-4766b273345d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:0f:a1:53:1b:de:c3:60:20:11:26:f4:4c:
                    d6:0c:ea:e0:48:a0:8c:1c:6d:df:ad:4c:0f:9e:c0:
                    37:03:de:02:04:ac:c1:98:91:6f:78:74:5f:fe:ca:
                    bb:db:e0:34:3b:c2:4e:62:8e:0f:f3:e2:82:43:07:
                    0c:80:ad:a4:99:a2:54:9d:99:a1:ea:89:3a:fc:f3:
                    6d:3a:91:30:92:b2:85:5a:74:64:f8:be:45:d8:a0:
                    90:70:29:0b:d5:2f:91:08:d7:b5:b0:1f:aa:e2:0c:
                    bc:f2:4f:0c:2c:b9:2b:65:e8:db:2f:9b:75:76:15:
                    ee:87:93:3e:fa:fa:38:fa:74:b5:5e:e4:c7:3b:95:
                    02:ef:ff:70:b9:b5:26:d6:f8:b6:d1:9a:4b:7f:c3:
                    42:4c:63:45:8e:9f:a9:26:c2:07:be:e3:59:fd:d1:
                    75:ee:4c:28:e8:aa:e8:c9:90:a1:e9:da:05:8e:0b:
                    8d:96:fe:02:23:d0:73:52:40:61:f5:54:a1:ba:19:
                    42:a4:ae:1f:f9:ca:ed:5e:0e:12:1a:bd:5b:ea:6d:
                    9e:0d:4b:81:65:5d:bf:18:43:c7:4d:e9:79:ef:2c:
                    92:a7:ff:77:17:a9:9a:7b:b0:2f:37:a5:23:2c:97:
                    bf:ec:6b:1b:87:c0:e3:c2:14:bf:46:fd:c0:b3:99:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:66:8A:69:F8:AD:66:D1:F6:7E:AC:F1:B2:B6:8B:70:5F:0D:EE:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b1:75:e9:3f:e9:e5:8c:46:d6:44:75:7c:54:1b:72:1c:a8:
         13:37:fe:ed:23:59:58:c5:cb:4b:55:24:f9:e4:68:2d:70:33:
         1c:c0:9a:35:2d:5f:25:f2:fa:21:6e:64:2c:6d:97:76:1e:8c:
         ad:c6:51:70:47:04:e1:c7:75:7f:e6:06:cd:21:c3:d4:ca:31:
         7c:43:05:94:30:54:16:c9:d4:6b:7b:5a:00:c1:49:87:53:06:
         cd:86:76:76:c4:f2:b1:6f:44:ec:0d:84:ad:ab:f3:f6:41:e6:
         34:02:dc:9c:91:09:0f:3b:04:df:8d:ae:85:5e:df:95:b9:36:
         52:fe:a1:50:bf:02:9f:d3:11:e8:eb:e1:f9:54:1a:8a:42:e2:
         f1:2e:8a:b1:93:b2:bc:c9:34:5f:31:c5:08:d0:0a:fc:10:5f:
         e7:25:df:11:77:c2:15:f3:a3:df:ea:50:34:a1:52:ff:3f:7a:
         ff:57:e6:7c:45:8c:17:c6:29:9c:1b:5a:a9:b5:e2:08:f2:6d:
         5c:f3:54:9c:e0:09:df:24:3b:64:5e:08:e8:15:c1:89:89:f0:
         50:79:7b:ba:56:65:29:77:31:31:91:6c:e4:11:f7:33:c2:88:
         93:6d:66:98:2f:77:07:e1:20:63:77:f8:d5:80:5a:c7:76:85:
         fc:a0:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 02:11:17 2026 by rpki-client