Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa
File:                     384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa (raw, json)
Hash identifier:          J8RzFVgYEndTpVG6Eh3rTfFeJb0z3bJug7OzhyALc+I=
Subject key identifier:   DB:2A:49:F9:1F:85:29:BE:46:AD:C3:82:51:D7:6D:A8:42:DB:F8:71
Certificate issuer:       /CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2
Certificate serial:       010D0C9F4328584E455A00C8A84FAD08CE3D3000
Authority key identifier: 69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     393770
IP address blocks:        2607:e4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:5a:00:c8:a8:4f:ad:08:ce:3d:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=d3157328-d4e6-45d7-9cbc-91fe391c6280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:34:78:75:77:66:19:3f:37:6a:f9:b0:da:3c:
                    8a:fd:bc:da:b6:dc:f6:eb:a6:2d:a3:bb:04:f3:e7:
                    f4:fa:d2:2f:39:e9:2a:b6:1d:fb:a1:e3:dd:60:0c:
                    0d:36:cb:0c:4f:cc:74:07:40:7a:ac:c8:10:e7:6c:
                    63:23:f0:9b:ca:d6:05:13:47:2f:12:04:4b:60:fe:
                    56:bc:c3:d5:c8:83:c5:68:3c:1d:e1:1f:77:4f:01:
                    63:89:47:ce:66:7a:90:fa:73:89:ba:b0:80:22:a0:
                    29:1f:9f:bf:6f:86:6f:ef:06:97:c1:68:e9:61:af:
                    7e:ee:84:98:36:85:c5:6b:bf:d2:fd:01:80:05:0e:
                    2e:0e:bb:24:61:d5:ff:05:45:b1:b5:62:e8:26:2a:
                    fa:d3:f6:1a:28:7c:56:8e:c0:50:b2:4d:4b:7e:ff:
                    95:f3:b1:ca:3f:38:d4:36:e0:05:f5:95:06:5c:34:
                    af:46:97:44:ba:e7:fd:2e:9d:bf:a4:40:e3:ef:71:
                    7c:91:f8:24:34:f2:9d:59:0f:73:31:8e:2e:0a:82:
                    df:39:27:9d:bb:97:0b:72:2f:7f:61:f5:30:1c:3f:
                    d9:fc:a5:85:93:68:ba:33:0d:af:e7:86:5d:71:1f:
                    86:94:40:a4:c4:2b:9d:c3:39:87:5e:c6:44:44:bc:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2A:49:F9:1F:85:29:BE:46:AD:C3:82:51:D7:6D:A8:42:DB:F8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl

            X509v3 Authority Key Identifier:
                keyid:69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:60:2c:c1:f4:74:29:e8:8e:13:78:7e:df:ee:44:2d:ed:e6:
         fa:b2:9f:28:3c:27:35:44:a4:ae:8e:c3:ea:45:39:24:fa:38:
         14:ec:df:0c:12:09:da:74:4f:e7:3a:b2:11:bc:c1:ab:12:33:
         45:15:48:94:9a:43:f3:ad:1a:af:ef:42:d3:57:9e:28:43:48:
         a6:c8:10:56:e2:fe:d5:d4:2b:0d:81:1e:3d:e8:a9:98:1a:55:
         77:e9:ff:63:43:00:c9:75:81:14:da:ef:10:ae:1f:3f:9a:5f:
         fa:f9:b9:42:0b:56:ca:d5:2d:2d:fd:f8:69:72:99:59:26:fc:
         11:c0:92:c9:d3:7d:bb:42:7e:45:16:75:bc:fd:a3:30:0b:d2:
         0e:cf:28:7e:8b:33:d2:cb:6d:31:5f:f3:e3:0c:22:00:b8:a9:
         a3:4c:cd:b7:17:99:74:34:04:c6:68:5c:ed:bb:17:7d:e6:c3:
         05:2c:f2:67:56:56:01:69:31:5f:af:86:ab:62:a0:5a:36:ba:
         05:72:9a:7b:6c:49:35:c5:01:42:99:97:3a:64:63:5f:da:5c:
         d9:ad:4e:fa:ee:3b:7e:e3:84:05:a4:39:c2:39:17:84:6b:dc:
         77:83:36:3a:7d:d1:df:c8:22:12:c1:5c:a4:6c:05:17:e2:f3:
         f5:d2:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:02:46 2026 by rpki-client