Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/6b295071-e758-35cd-86a2-9b413d559a1d.roa
File:                     6b295071-e758-35cd-86a2-9b413d559a1d.roa (raw, json)
Hash identifier:          omMJlJBu7DdSDoq2f7e7Iaw9c0knJ1kDgc9eIiOSxjo=
Subject key identifier:   D5:09:A7:B4:09:AD:D3:D4:BE:7A:CD:9F:28:17:D8:92:69:E6:03:32
Certificate issuer:       /CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f
Certificate serial:       010D0C9F4328584E5A49F1259D393260C5BB4C00
Authority key identifier: 0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/6b295071-e758-35cd-86a2-9b413d559a1d.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     393667
IP address blocks:        2620:11c:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f1:25:9d:39:32:60:c5:bb:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=9c9f3d26-e2ce-4087-8044-227d577ec558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:82:c4:4f:42:58:e5:ac:3e:38:f5:92:d9:
                    9d:f6:03:d6:d1:94:34:54:a2:db:03:fc:9f:7c:e5:
                    ff:41:6f:1c:e3:b2:80:30:65:25:6a:c4:ca:e5:55:
                    b2:6b:ec:31:80:88:86:5f:cd:13:6a:72:99:6b:81:
                    a8:c6:ff:44:63:0c:99:f8:6d:25:3e:04:36:7d:e2:
                    aa:29:6e:44:77:08:4f:07:23:27:21:50:e5:c8:84:
                    91:55:2a:64:14:0c:8e:56:42:52:8e:73:e6:44:4a:
                    02:d8:83:ac:81:ec:d4:66:0b:18:21:9d:23:e5:20:
                    99:7d:be:ec:61:2e:7e:d1:f0:54:9e:d7:78:f9:ac:
                    80:d3:fa:0f:ea:12:18:20:b1:9b:b3:13:c2:d0:97:
                    d4:3f:ee:8d:fd:8b:b4:4b:6c:81:68:33:85:2b:c0:
                    d1:04:62:fb:75:8c:33:88:21:06:4c:bc:1c:c3:ae:
                    de:24:ce:7e:df:1f:74:5b:8e:9d:63:01:b9:e1:fb:
                    0e:2e:a7:e2:53:c5:64:f6:e3:e6:ca:1f:b4:94:d3:
                    46:d5:a4:92:f1:c4:fd:13:1d:a8:19:54:ab:76:66:
                    1d:29:6e:8d:ed:03:40:1a:c8:e7:25:0e:ec:4e:0c:
                    02:d9:52:94:5d:22:1e:b8:ce:50:97:09:ab:f4:60:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:09:A7:B4:09:AD:D3:D4:BE:7A:CD:9F:28:17:D8:92:69:E6:03:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/6b295071-e758-35cd-86a2-9b413d559a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.crl

            X509v3 Authority Key Identifier:
                keyid:0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11c:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:57:d4:26:4b:05:ae:8a:48:bd:44:52:2f:0b:f3:b5:96:82:
         9f:8c:8b:6b:99:b5:09:22:d5:bc:81:4a:f8:4e:cd:d4:d5:84:
         af:0a:34:67:5c:67:0e:16:3c:52:8d:c7:8a:8e:58:a1:ca:d3:
         34:2d:5e:b8:bf:86:1c:4b:b7:bb:7f:eb:82:ba:5e:89:2e:22:
         90:4c:d4:10:da:68:93:82:83:cf:dd:98:c5:45:56:85:cc:87:
         11:51:37:c6:e6:38:bb:13:9e:3e:fa:80:df:a8:39:70:6b:d3:
         f8:09:ea:26:bc:5b:f8:ee:87:19:65:59:6e:63:fe:76:05:c5:
         2f:3f:ea:e1:e7:de:23:98:2f:1f:d9:38:55:25:a2:15:6f:6d:
         96:6f:6d:09:78:a9:4f:e4:83:f9:06:c2:d4:15:04:f5:39:15:
         a7:38:59:21:fa:0d:0b:7a:ee:84:f0:4d:7b:d9:57:b1:eb:9a:
         2f:67:14:09:17:36:71:0b:5f:04:71:5f:e2:f1:3d:39:f7:2f:
         d7:55:78:2a:50:6b:85:80:59:7d:90:fb:82:11:06:28:ca:59:
         8c:28:fa:7e:f0:cd:0b:0b:1c:f6:ef:4d:8e:42:7f:ee:f8:90:
         3d:46:0a:a4:5a:84:b3:0e:e7:76:21:5c:7f:0d:19:eb:d3:5d:
         f3:2e:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:22:15 2026 by rpki-client